A Sample Device Configuration The following is a set of commands issued on a router to enable NetFlow version 5 on the FastEthernet 0/1 interface and export to the machine 192.168.9.101 on port 9996. switch>(enable)ip flow-export destination 192.168.9.101 9996 switch>(enable)ip flow-export version 7 switch>(enable)ip flow-export source FastEthernet 0/1 switch>(enable)ip flow-cache timeout active 1 switch>(enable)ip route-cache flow infer-fields
NetFlow Statistics Collection Configuration Example
http://www.cisco.com/en/US/docs/switches/lan/catalyst4500/12.2/20ew/configuration/guide/nfswitch.html#wp1014951
Switch# config t Enter configuration commands, one per line. End with CNTL/Z. Switch(config)# ip route-cache flow Switch(config)# ip flow-export destination 40.0.0.2 9991 Switch(config)# ip flow-export version 5 Switch(config)# end Switch# show ip flow export Flow export is enabled Exporting flows to 40.0.0.2 (9991) Exporting using source IP address 40.0.0.1 Version 5 flow records 2 flows exported in 1 udp datagrams 0 flows failed due to lack of export packet 0 export packets were sent up to process level 0 export packets were dropped due to no fib 0 export packets were dropped due to adjacency issues 0 export packets were dropped due to fragmentation failures 0 export packets were dropped due to encapsulation fixup failures Switch# Switch# show ip cache flow IP Flow Switching Cache, 17826816 bytes 0 active, 262144 inactive, 4 added 14 ager polls, 0 flow alloc failures Active flows timeout in 1 minutes Inactive flows timeout in 10 seconds last clearing of statistics 15:48:37 Protocol Total Flows Packets Bytes Packets Active(Sec) Idle(Sec) -------- Flows /Sec /Flow /Pkt /Sec /Flow /Flow UDP-other 1 0.0 3 46 0.0 0.0 10.3 IP-other 1 0.0 100 38 0.0 0.0 10.2 Total: 2 0.0 51 38 0.0 0.0 10.2 SrcIf SrcIPaddress DstIf DstIPaddress Pr SrcP DstP Pkts Switch#
show ip flow export 顯示當前Netflow的配置。 show ip cache verbose flow 顯示當前活動的流的概要,還顯示設備輸出了多少Netflow數據。