Netflow SW 3850 configuration to work with Netflow (Layer 7)
I need all the help as possible.
Recently I configured a SW-3850 (IOS XE) to send records about NETFLOW to OP MANAGER Software Collector. Everything works without problem but. The System administrator ask me send "Layer 7 Application" because he wants a relation about the traffic.
The collector has a header like this:
And the software has a demo where the same section has the next information complete:
The configuration SW is the next:
flow record NFRECORD_IN match ipv4 version match ipv4 tos match ipv4 protocol match ipv4 source address match ipv4 destination address match transport source-port match transport destination-port match interface input match flow direction collect counter bytes long collect counter bytes layer2 long ! ! flow record NFRECORD_OUT match ipv4 version match ipv4 tos match ipv4 protocol match ipv4 source address match ipv4 destination address match transport source-port match transport destination-port match interface output match flow direction collect counter bytes long collect counter bytes layer2 long
flow exporter NFEXPORTER destination "some" source Vlan1 transport udp 9996
option exporter-stats option application-table
flow monitor NFMONITOR_IN exporter NFEXPORTER cache timeout active 60 record NFRECORD_IN ! ! flow monitor NFMONITOR_OUT exporter NFEXPORTER cache timeout active 60 record NFRECORD_OUT
But I can't that the SW does or send the information or view information int the "Layer 7 Application" section
I tried with AVC, but in this case doesn't because AVC with the command "match application name" is for WLAN.
Hi everyone, I would like to thank you in advance for any help you can provide a newcomer like myself!
Im studying the 100-105 book by Odom and am currently on the topic of Port security. I purchased a used 2960 and I'm trying to follow a...
While deploying a number of 18xx/2802/3802 model access points (APs), which run AP-COS as their operating platform. It can be observed on some occasions that while many of their access points were able to join the fabric WLC withou...
I am going to design and build an LAN network under a tunnel underground with long distance between the switches.
I will have 2 Catalyst switches and 8 Industrial IE3000, and they will be connected with fiber.
For now I am planning on use Layer-2 s...