Hi All
I have some questions around netflow and also about an issue.
First of all, we have set up netflow monitors on the input and output side, my question is do we really need both directions? what does this give us?
The config we apply is below, some has been omitted
flow record FLOW-RECORD-IN
match ipv4 tos
match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match interface input
match flow direction
collect interface output
collect counter bytes long
collect counter packets long
!
!
flow record FLOW-RECORD-OUT
match ipv4 tos
match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match interface output
match flow direction
collect interface input
collect counter bytes long
collect counter packets long
!
vlan configuration 2403
ip flow monitor FLOW-MONITOR-IN input
ip flow monitor FLOW-MONITOR-OUT output
When we apply this, we get the following error,
CORE-VSS(config)#vlan configuration 1442
CORE-VSS(config-vlan-config)#ip flow monitor FORESCOUT-NETFLOW-OUT output
% Flow Monitor: 'FORESCOUT-NETFLOW-OUT' could not be added to interface due to invalid sub-traffic type: 0
How do we fix this?
Cheers
