How to show flows of specific IP ranges

[thestudent101]

Hi,

Is there a command that shows flows of specific IP ranges from my flow exporter? I tried #show flow exporter <exporter name> statistics and it only showed me all successfully sent packets. I want to verify if my exporter sends flows for specific IP ranges.

Thank you.

[Mark Malone · Accepted solution]

Hi
no you would need software to do that like LiveAction / NetQos as an example , to be able to view breakdowns of specific flows
The netflow is an exporter feature best used when sent to an application that can graph it and drill down into ips , protocols , qos etc

The only IP you usually get on switch side you what you have set it to export too

#sh flow exporter name NetQos
Flow Exporter NetQos:
Description: export Netflow traffic to HQ
Export protocol: NetFlow Version 9
Transport Configuration:
Destination IP address: 172.x.x.x
Source IP address: 172.x.x.x
Source Interface: Vlan1222
Transport Protocol: UDP
Destination Port: 9995
Source Port: 57060
DSCP: 0x0
TTL: 255
Output Features: Not Used
Options Configuration:
interface-table (timeout 1000 seconds)
exporter-stats (timeout 1000 seconds)

[thestudent101]

Thank you. This is very helpful. We have a remote site which collects these flows and analyze traffic patterns for monitoring and protecting IP ranges from DDoS attacks. But they said that some IP ranges are not monitored over netflow and wants to verify if exporter sends flows for the missing ranges.