Cisco Profiler NetFlow

boris.majstorovic — Fri, 21 Feb 2020 12:17:36 GMT

Can someone help me to determine does my Net Flow config is correct or not? What should I do on Profiler web konsole to now that the NetFlow is working.

This is config on router:

router (config)#ip flow-export version 5

router (config)#ip flow-export destination 10.0.86.9 2055

router (config)#interface ATM0/1/0

router (config-if)#ip flow ingress

router (config-if)#ip route-cache flow

This is what I get on eth0 (trusted) on CAS (Collector is on CAS servers)

13:32:47.215752 IP 192.168.12.158.50229 > mtel-nacserver-1.iop: UDP, length 312

13:33:01.214074 IP 192.168.12.158.50229 > mtel-nacserver-1.iop: UDP, length 120

13:33:14.212558 IP 192.168.12.158.50229 > mtel-nacserver-1.iop: UDP, length 216

13:33:26.211179 IP 192.168.12.158.50229 > mtel-nacserver-1.iop: UDP, length 264

13:33:39.209589 IP 192.168.12.158.50229 > mtel-nacserver-1.iop: UDP, length 72

13:33:51.208193 IP 192.168.12.158.50229 > mtel-nacserver-1.iop: UDP, length 264

13:34:12.205745 IP 192.168.12.158.50229 > mtel-nacserver-1.iop: UDP, length 408

13:34:31.203515 IP 192.168.12.158.50229 > mtel-nacserver-1.iop: UDP, length 312

13:34:45.201813 IP 192.168.12.158.50229 > mtel-nacserver-1.iop: UDP, length 168

13:34:58.200285 IP 192.168.12.158.50229 > mtel-nacserver-1.iop: UDP, length 168

13:35:16.198210 IP 192.168.12.158.50229 > mtel-nacserver-1.iop: UDP, length 312

NetFlow Module Config

Network Config

THANKS

Re: Cisco Profiler NetFlow

boris.majstorovic — Fri, 25 Mar 2011 07:14:27 GMT

Hi all

Which IP address should I configure as NetFlow destination.

In documentation has some confusing sentence.

The Cisco NAC Profiler Collector uses the 4th NIC of the CAS to collect data from a SPAN port, SNMP, or NetFlow. The Cisco NAC Profiler Collector aggregrates the relevant data, consolidates it, and then forwards it on to the Cisco NAC Profiler Server.

AND

By default, enabling the NetFlow Agent on a NetRelay module initiates listening for XDRs sent to the Collector management interface (eth0) by routers and other NetFlow collectors on port 2055.

Is that 4th NIC (eth3) like for SPAN or eth0?

Has anyone any comment

topic Re: Cisco Profiler NetFlow in Network Security

Cisco Profiler NetFlow

Re: Cisco Profiler NetFlow