1) Select which interface to enable netflow
2) point netflow to listener ip
3) define version of netflow. walla..
(config)#conf t
(config)#int fa 0/0
(config-if)# ip route-cache flow
(config-if)#exit
(config)#ip flow-export destination 1.1.1.1 9995
(config)#ip flow-export version 5
(config)#exit
To test netflow configuration #show ip flow export
Theb run the ntop.
#ntop -d -s -b -w 1.1.1.1:68532
Since i have multiple router/switches, i need to listen for multiple netflow traffic. I need to config netflow plugin to listen on multiple port.So, defining another port in netflow configuration for different switch will do the tricks.
By the way, ntop is a very nice tool written by Luca Deri. If you're looking for netflow solution and happen to have extra money, go and buy this tool => nbox
No comments:
Post a Comment