Information about NetFlow
How does this all work?
The NetFlow exporter examines each packet going by. It categorizes the packet according to the criteria above, and updates an internal cache that retains the amount of data that has been seen in each flow. From time to time, the exporter sends (exports) the current set of flow records to the NetFlow collector and clears its cache.
How do I configure my exporters?
Read the Enabling NetFlow on Cisco Equipment tech note for details on using IOS to configure Cisco gear.
What Cisco equipment supports NetFlow?
The Cisco white paper NetFlow Performance Analysis contains a list of Cisco equipment that supports NetFlow. We have reproduced it here:
For the following selection of routers, tests were performed using Cisco IOS Software Release 12.0S. The platforms and configurations tested include:
- Cisco 2600 Router
- Cisco 2851 Router
- Cisco 3640 Router
- Cisco 3745 Router
- Cisco 7200 Router with Network Processing Engine NPE-300
- Cisco 7200 Router with Network Services Engine NSE-1
- Cisco 7500 Router with Route Switch Processor 8 using Cisco Express Forwarding
- Cisco 7500 Router with Route Switch Processor 8 using Distributed Cisco Express Forwarding
- Cisco 12000 Internet Router running Distributed Cisco Express Forwarding (Engine 1)
- Cisco 12000 Internet Router running Distributed Cisco Express Forwarding, with 1:100 sampling enabled
For the following selection of routers an enhanced selection of tests were run using Cisco IOS Software Release 12.4T:
- Cisco 1841 Router
- Cisco 2811 Router
- Cisco 3845 Router
- Cisco 7200 Router with Network Processing Engine NPE-400
- Cisco 7200 Router with Network Processing Engine NPE-G1
- Cisco 7200 Router with Network Processing Engine NPE-G2
- Cisco 7301 Router
I don't have any Cisco gear. Can I still use InterMapper Flows?
Yes. There are software-only NetFlow exporter packages. Some customers have used both the nProbe and softflowd packages with InterMapper Flows. Read the Configuring the nProbe NetFlow Exporter and Configuring the Softflowd NetFlow Exporter tech notes for an overview of the installation and configuration process.
Beginning with version 1.1, InterMapper Flows supports sFlow (sampled flow) data from HP, Extreme, Foundry, Force10 and other network equipment. sFlow provides information about the traffic through the network, including the sender and recipient of the traffic flows as well as the protocols involved. Read the Using InterMapper Flows with sFlow tech note for instructions on configuring InterMapper Flows to receive sFlow data.
|
