Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

Netflow SW 3850 configuration to work with Netflow (Layer 7)

Hello Everybody.

I need all the help as possible.

Recently I configured a SW-3850 (IOS XE) to send records about NETFLOW to OP MANAGER Software Collector. Everything works without problem but. The System administrator ask me send "Layer 7 Application" because he wants a relation about the traffic.

The collector has a header like this:

And the software has a demo where the same section has the next information complete:

The configuration SW is the next:

flow record NFRECORD_IN
match ipv4 version
match ipv4 tos
match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match interface input
match flow direction
collect counter bytes long
collect counter bytes layer2 long
!
!
flow record NFRECORD_OUT
match ipv4 version
match ipv4 tos
match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match interface output
match flow direction
collect counter bytes long
collect counter bytes layer2 long

!

!

flow exporter NFEXPORTER
destination "some"
source Vlan1
transport udp 9996

option exporter-stats
option application-table

!

!

flow monitor NFMONITOR_IN
exporter NFEXPORTER
cache timeout active 60
record NFRECORD_IN
!
!
flow monitor NFMONITOR_OUT
exporter NFEXPORTER
cache timeout active 60
record NFRECORD_OUT

 

But I can't that the SW does or send the information or view information int the "Layer 7 Application" section

I tried with AVC, but in this case doesn't because AVC with the command "match application name" is for WLAN.

Someone can Help me?

80
Views
0
Helpful
0
Replies
CreatePlease to create content