1-3
Catalyst 3750-X and 3560-X Switch Software Configuration Guide
OL-25303-03
Chapter 1 Configuring Flexible NetFlow
Configuring Flexible NetFlow
• Transport field source and destination ports to identify the type of application: ICMP, IGMP, or TCP
traffic.
You c an collect these key fields for the flow record:
• The total number of bytes, flows or packets sent by the exporter (exporter) or the number of bytes
or packets in a 64-bit counter (long).
• The timestamp based on system uptime from the time the first packet was sent or from the time the
most recent (last) packet was seen.
• The SNMP index of the input or output interface. The interface for traffic entering or leaving the
service module is based on the switch forwarding cache. This field is typically used in conjunction
with datalink, IPv4, and IPv6 addresses, and provides the actual first-hop interface for directly
connected hosts.
–
A value of 0 means that interface information is not available in the cache.
–
Some NetFlow collectors require this information in the flow record.
See the Cisco IOS Flexible NetFlow Configuration Guide and the Cisco IOS Flexible NetFlow Command
Reference for more detailed information.
Beginning in privileged EXEC mode, follow these steps to configure the customized flow record.
Command Purpose
Step 1
configure terminal Enters global configuration mode.
Step 2
flow record record-name Creates a flow record and enters Flexible NetFlow flow record
configuration mode. You can also use this command to modify an
existing flow record.
Step 3
description description (Optional) Creates a description for the flow record.
Step 4
match {ipv4 | ipv6} {destination |
source} address
or
match datalink {destination-vlan-id |
dot1q | ethertype | mac |
source-vlan-id}
or
match transport {icmp | igmp|
source-port | tcp | udp}
Configures a key field for the flow record.
See the Cisco IOS Flexible NetFlow Configuration Guide and the Cisco
IOS Flexible NetFlow Command Reference for more detailed
information.
Step 5
Repeat step 4 to configure additional files
for the record.
Step 6
collect counter {bytes [exported | long]
flows [exported] | packets} [exported |
long]
or
collect timestamp sys-uptime {first |
last}
or
collect interface {input | output} snmp
Configures one or more source fields in the flow as counter fields,
timestamp fields, or interface fields.
See the Cisco IOS Flexible NetFlow Configuration Guide and the Cisco
IOS Flexible NetFlow Command Reference for more detailed
information.
Step 7
Repeat Step 6 as required to configure
additional fields for the record.
Step 8
end Returns to privileged EXEC mode.
To Next Page
Loading...
