Cisco Catalyst 9400

PurposeCommand or Action
Device(config-flow-record)# collect
connection initiator
flow direction command. The initiator
keyword provides the following information
about the direction of the flow :
• 0x01 = Initiator - the flow source is the
initiator of the connection
For wired AVC, the initiator keyword is
always set to initiator.
Specifies to collect the number of connection
initiations observed.
collect connection new-connections
Example:
Step 15
Device(config-flow-record)# collect
connection new-connections
Specifies to collect the number of packets sent
by the server.
collect connection server counter packets
long
Example:
Step 16
Device(config-flow-record)# collect
connection server counter packets long
Specifies to collect the number of packets sent
by the client.
collect connection client counter packets
long
Example:
Step 17
Device(config-flow-record)# collect
connection client counter packets long
Specifies to collect the total number of bytes
transmitted by the server.
collect connection server counter bytes
network long
Example:
Step 18
Device(config-flow-record)# collect
connection server counter bytes network
long
Specifies to collect the total number of bytes
transmitted by the client.
collect connection client counter bytes
network long
Example:
Step 19
Device(config-flow-record)# collect
connection client counter bytes network
long
Configures the use of the DNS Domain-Name
as a Collect field for a DNS flow record.
collect application dns domain-name
Example:
Step 20
Device(config-flow-record)# collect
application dns domain-name
System Management Configuration Guide, Cisco IOS XE Bengaluru 17.4.x (Catalyst 9400 Switches)
197
Configuring Application Visibility and Control in a Wired Network
Flow Record 5 - DNS Flow Record