RE: Netflow

Hi Gaurav,

1. The netflow port will depend on the collector. I have seen some
collectors listen on port UDP 9000 but it really can be any port.

2. Flow caching needs to be enabled per interface.

Take a look here -->
http://www.cisco.com/en/US/docs/ios/netflow/configuration/guide/12_4t/nf_12_
4t_book.html

Cheers,

-Aaron.

-----Original Message-----
From: nobody_at_groupstudy.com [mailto:nobody_at_groupstudy.com] On Behalf Of
GAURAV MADAN
Sent: Monday, 1 August 2011 3:10 PM
To: Cisco certification
Subject: Netflow

Hi All

I have a following question on Netflow implementation in Cisco .

I think it is same as *(RFC 3176).. also called as SFLOW in some devices ?

Following are my questions :

1) is there a default UDP port that FLow dest. lsitens to ? I see this as
mandatory in Cisco :

*

Router(config)#ip flow-export destination 1.1.1.1 ?
  <1-65535> UDP port number

2) Can someone please tell how to we define globally and on selected
interfaces ? If I say "ip flow-export destination 1.1.1.1" ... does that
mean that it is enabled globally for all interfaces ?

3) For sampling of packets ; I think I do following :

!
flow-sampler-map TEST
 mode random one-out-of 500
!

Now how to apply this to affect globally on all interfaces . ?

Sorry for asking this .. I have never implemented this ever .. Hence basic
questions .

Thanks
Gaurav Madan

Blogs and organic groups at http://www.ccie.net
Received on Mon Aug 01 2011 - 15:52:58 ART