Page 1 of 1

Netflow on Cisco C6807-XL

Posted: Wed Oct 26, 2022 11:32 am
by Alvarenga89
Hi guys,
I hope you are doing well.

I’m trying to configure the Netflow on the Cisco C6807-XL, but it’s not working.

I can see the flow coming on Nagios, but I can’t see IPs. Am I missing anything?


Follow the config bellow


!
flow record defaultApplicationTraffic
match ipv4 tos
match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match interface input
match flow direction
collect transport tcp flags
collect interface output
collect counter bytes long
collect counter packets long
!
!
flow record Interface-Out-FR
match ipv4 tos
match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match interface output
match flow direction
collect transport tcp flags
collect interface input
collect counter packets long
!
!
flow exporter Netflow-to-Nagios
destination 10.75.24.75
source Vlan2
transport udp 9997
!
!
flow monitor Netflow-INT-out
exporter Netflow-to-Nagios
cache timeout active 60
record Interface-Out-FR
!
!
flow monitor Netflow1
exporter Netflow-to-Nagios
cache timeout active 60
record defaultApplicationTraffic
!
interface Vlan50
ip flow monitor Netflow1 input
ip flow monitor Netflow-INT-out output
!
end

Re: Netflow on Cisco C6807-XL

Posted: Wed Aug 09, 2023 11:10 am
by swolf
Hi @Alvarenga89, thanks for reaching out.

If you run an nfdump query on your collected data, does this provide source/destination IP information? I'm not the most experienced with the hardware configuration side of things, but it looks like you're explicitly exporting ipv4 information. If the Netflow data itself doesn't have IP address information, I would also try reaching out on the Cisco community forums.

Hopefully that's at least somewhat helpful - if you have any other questions or concerns, please let me know.

-Sebastian Wolf