Cflowd
Router Configuration Guide 727
4. To omit certain types of traffic from being sampled when the interface sampling is
enabled, the config>filter>ip-filter>entry>interface-disable-sample option may
be enabled via an ip-filter or ipv6-filter. The filter must be applied to the service or
network interface on which the traffic to be omitted is to ingress the system.
Interface Configurations
CLI Syntax: config>router>if#
cflowd {acl | interface}
no cflowd
Depending on the option selected, either acl or interface, cflowd extracts traffic flow samples
from an IP filter or an interface for analysis. All packets forwarded by the interface are
analyzed according to the cflowd configuration.
The acl option must be selected in order to enable traffic sampling on an IP filter. Cflowd
(filter-sample) must be enabled in at least one IP filter entry.
The interface option must be selected in order to enable traffic sampling on an interface. If
cflowd is not enabled (no cflowd) then traffic sampling will not occur on the interface.
Service Interfaces
CLI Syntax: config>service>vpls service-id# interface ip-int-name
cflowd {acl | interface}
When enabled on a service interface, cflowd collects routed traffic flow samples through a
router for analysis. Cflowd is supported on IES and VPRN services interfaces only. Layer 2
traffic is excluded. All packets forwarded by the interface are analyzed according to the
cflowd configuration. On the interface level, cflowd can be associated with a filter (ACL) or
an IP interface.
Specifying Sampling Options in Filter Entries
Packets are matched against filter entries to determine acceptability. With cflowd, only the
first packet of a flow is compared. If the first packet matches the filter criteria, then an entry
is added to the cflowd cache. Subsequent packets in the same flow are also sampled based on
the cache entry.