The next step is to create the flow exporter.

If you're using Border Gateway Protocol (or BGP) in your environment, add the following commands to collect AS information: collect routing source as and collect routing destination as. If your device supports Cisco NBAR2 or Next Generation NBAR, add the collect application name command to the flow record.

To collect the egress interface data, type collect interface output.Ĭomplete your flow record configuration by entering the following commands: To collect the ingress interface data, enter match interface input.

To collect type of service data, type match ipv4 tos. To collect protocol information, enter match ipv4 protocol.įor application port data, type match transport source-port and match transport destination-port. To collect both endpoints of the conversation, enter match ipv4 source address and then match ipv4 destination address. Next, you'll define match and collect statements to capture fields to include in the flow record. For the purposes of this demo, we'll name it 'NTA record,' but you can use any name you like. However, in general, there are four basic steps to capturing flow data using Flexible NetFlow: create a flow record, create a flow exporter, create a flow monitor, and apply the flow monitor to interfaces.Īfter you've logged into the router, go into global configuration mode by typing config t. Depending on the Cisco device you are using, there may be additional steps required to successfully collect ingress and egress flow data.

Solarwinds traffic analyzer