Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Community Member

router as netflow sniffer?

can a spare router be configured to sniff netflow from a spanned switchport? Maybe set a default route to null0 or some other way to let it swallow all traffic?

2 REPLIES
Hall of Fame Super Silver

Re: router as netflow sniffer?

Hello Paul,

I think this is possible and if I remember correctly I did this several years ago.

My only concern is that a router should only process traffic destinated to its MAC address.

You may need to tweak the configuration to put the port in promiscuos mode or you will not be able to emulate a sniffer.

I think in my setup the router was on the path of live traffic or placed as end device in the lab chain.

Hope to help

Giuseppe

Community Member

Re: router as netflow sniffer?

Thanks for the reply.

int f0/0

rmon promiscuous

is supposed to let the router gather rmon stats on all packets it sees. Does anyone know if this will enable netflow statistics for the same traffic, even if it doesn't flow back out of the router?

138
Views
0
Helpful
2
Replies
CreatePlease to create content