NetFlow
来源:互联网 发布:文件网络同步 编辑:程序博客网 时间:2024/04/29 17:54
NetFlow
NetFlow流量定义七要素:
1.Source IP address
2.Destination IP address
3.Source port
4.Destination port
5.Layer 3 protocol type
6.CoS or Tos byte
7.Input logical interface
1.创建一个NetFlow输出目的
flow exporter Netflow-Exporter
destination 202.100.1.241
transport udp 6666
export-protocol netflow-v9
2.创建一个流量监控
flow monitor Monitor1
record netflow ipv4 original-input
exporter Netflow-Exporter
3.创建一个自定义的流量记录
flow record Yeslab-Record
match ipv4 source address
match ipv4 destination address
collect counter bytes
4.再创建一个流量监控
flow monitor Monitor2
record Yeslab-Record
export Netflow-Exporter
5.在两个接口下分别调用已定义的监控
interface fastethernet 0/0
ip address 202.100.1.10 255.255.255.0
ip flow monitor Monitor1 input
interface fastethernet 1/0
ip address 10.1.1.10 255.255.255.0
ip flow monitor Monitor2 input
8.配置flow-top-talker
ip flow-top-talkers
top 5
sort-by packets
match protocol 1
9.配置采集MAP
flow-sampler-map Yeslab
mode random one-out-of 10
10.接口下调用采集MAP
interface fastethernet 0/0
ip address 202.100.1.10 255.255.255.0
duplex half
flow-sampler Yeslab
显示所有接口NetFlow输出统计
show flow exporter statistics
查看Monitor1 and Monitor2收集的信息
show flow monitor name Monitor1 cache format table
show flow monitor name Monitor2 cache format table
show ip flow top-talkers
NetFlow流量定义七要素:
1.Source IP address
2.Destination IP address
3.Source port
4.Destination port
5.Layer 3 protocol type
6.CoS or Tos byte
7.Input logical interface
1.创建一个NetFlow输出目的
flow exporter Netflow-Exporter
destination 202.100.1.241
transport udp 6666
export-protocol netflow-v9
2.创建一个流量监控
flow monitor Monitor1
record netflow ipv4 original-input
exporter Netflow-Exporter
3.创建一个自定义的流量记录
flow record Yeslab-Record
match ipv4 source address
match ipv4 destination address
collect counter bytes
4.再创建一个流量监控
flow monitor Monitor2
record Yeslab-Record
export Netflow-Exporter
5.在两个接口下分别调用已定义的监控
interface fastethernet 0/0
ip address 202.100.1.10 255.255.255.0
ip flow monitor Monitor1 input
interface fastethernet 1/0
ip address 10.1.1.10 255.255.255.0
ip flow monitor Monitor2 input
8.配置flow-top-talker
ip flow-top-talkers
top 5
sort-by packets
match protocol 1
9.配置采集MAP
flow-sampler-map Yeslab
mode random one-out-of 10
10.接口下调用采集MAP
interface fastethernet 0/0
ip address 202.100.1.10 255.255.255.0
duplex half
flow-sampler Yeslab
显示所有接口NetFlow输出统计
show flow exporter statistics
查看Monitor1 and Monitor2收集的信息
show flow monitor name Monitor1 cache format table
show flow monitor name Monitor2 cache format table
show ip flow top-talkers
0 0
- NetFlow
- netflow
- netflow
- NetFlow
- netflow
- NetFlow
- Netflow(FreeBSD)
- netflow 数据格式
- netflow配置
- Netflow简介
- Netflow配置
- netflow简介
- 【NetFlow】NetFlow V9协议详细分析
- NetFlow Export Datagram Format
- NetFlow还是sFlow?
- netflow数据包格式
- netflow配置实例
- 关于netflow底层设计
- Perl中对数组进行操作的操作符
- nutch系列1——nutch简单介绍
- sql 语句大全
- 通过nginx反向代理,Tomcat获取真实的客户端IP而非服务器IP
- OneThink修改后台文档列表排序规则
- NetFlow
- FragmentStatePagerAdapter分页
- Servlet生命周期(跟龙哥学javaweb)笔记
- java集合类深入分析之TreeMap/TreeSet篇
- easyUi 图片上传
- 策略模式
- Failed to set (keyPath) user defined inspected property on (UIView): [<UIView 0x7994f790> setValue:f
- HDU 4313 Matrix (最小生成树)
- iOS NSTimer 的使用