Flexible NetFlow on cisco 3850

[Ratheesh mv]

Hi Team ,   Could anyone help me to understand the use of below commands ?    

"match interface input"  

"match flow direction"

Thanks in advance

[Deepak Kumar · Accepted solution]

Hi,

match interface input

A flow record requires at least one key field before it can be used in a flow monitor. The key fields differentiate flows, with each flow having a unique set of values for the key fields. The key fields are defined using the match command.

match interface input configures the input interface as a key field. You have the ability to use output as another option.

match flow direction

This field indicates the direction of the flow. This is of most use when a single flow monitor is configured for input and output flows. It can be used to find and eliminate flows that are being monitored twice, once on input and once on output. This field may also be used to match up pairs of flows in the exported data when the two flows are flowing in opposite directions.

https://www.cisco.com/c/en/us/td/docs/ios/fnetflow/command/reference/fnf_book/fnf_01.html

Regards,

Deepak Kumar

[Georg Pauwen · Accepted solution]

Hello,

in additionto Deepak's post, I was looking around for a good explanation of key fields used in Flexible NetFlow, and came across the article below:

https://www.plixer.com/blog/flexible-netflow/flexible-netflow-collect-match-non-key-key-fields/