netflow

system netflow
SDE M10-Smart M2 RS420 AresC640

Flow accounting settings

Required:

system netflow app-id
SDE M10-Smart M2 RS420 AresC640

Collect and export app-id

system netflow connmark
SDE M10-Smart M2 RS420 AresC640

Connmark configuration and collect and export connmark

system netflow connmark mark <u32>
SDE M10-Smart M2 RS420 AresC640
Values:
  • u32 – Choose a mark to identify connmark

Instances:

Multiple

system netflow connmark mark <u32> name <txt>
SDE M10-Smart M2 RS420 AresC640
Values:
  • txt – Name of connmark-tag

system netflow connmark vrf-mark <id>
SDE M10-Smart M2 RS420 AresC640

Choose a vrf mark to identify connmark

Reference:

system vrf <id>

Instances:

Multiple

system netflow connmark vrf-mark <id> name <txt>
SDE M10-Smart M2 RS420 AresC640
Values:
  • txt – Name of connmark-tag

system netflow debug <u32>
SDE M10-Smart M2 RS420 AresC640

Debug verbosity level

Values:
  • u32 – Level (0-4)

system netflow destination <fqdn|ipv4|ipv6>
SDE M10-Smart M2 RS420 AresC640
Values:
  • fqdn – Export destination domain name

  • ipv4 – Export destination domain name

  • ipv6 – Export destination domain name

Instances:

Multiple

system netflow destination <fqdn|ipv4|ipv6> dont-verify-server
SDE M10-Smart M2 RS420 AresC640

Dont check authentity of server certificates

system netflow destination <fqdn|ipv4|ipv6> dtls
SDE M10-Smart M2 RS420 AresC640

Encrypt netflow traffic

system netflow destination <fqdn|ipv4|ipv6> port <u32>
SDE M10-Smart M2 RS420 AresC640
Values:
  • u32 – Destination port

system netflow dns-host
SDE M10-Smart M2 RS420 AresC640

Collect and export dns host

system netflow engine-id <u32>
SDE M10-Smart M2 RS420 AresC640
Values:
  • u32 – Observation Domain ID

system netflow exportcpu <u32>
SDE M10-Smart M2 RS420 AresC640
Values:
  • u32 – Lock exporter to this cpu

system netflow hashsize <u32>
SDE M10-Smart M2 RS420 AresC640
Values:
  • u32 – Hash table size

system netflow http-host
SDE M10-Smart M2 RS420 AresC640

Collect and export http host

system netflow http-ref
SDE M10-Smart M2 RS420 AresC640

Collect and export http referer

system netflow http-ua
SDE M10-Smart M2 RS420 AresC640

Collect and export http user agent

system netflow http-url
SDE M10-Smart M2 RS420 AresC640

Collect and export http url

system netflow local-address <ipv4|ipv6>
SDE M10-Smart M2 RS420 AresC640
Values:
  • ipv4 – Choose the output local address

  • ipv6 – Choose the output local address

Local IP address:

system netflow local-interface <ifc>
SDE M10-Smart M2 RS420 AresC640
Values:
  • ifc – Choose the output local interface

system netflow local-vrf <id>
SDE M10-Smart M2 RS420 AresC640

Choose the output local vrf

Reference:

system vrf <id>

system netflow mark <u32>
SDE M10-Smart M2 RS420 AresC640
Values:
  • u32 – Choose a number to mark netflow traffic

system netflow maxflows <u32>
SDE M10-Smart M2 RS420 AresC640
Values:
  • u32 – Maximum number of flows

system netflow protocol <id>
SDE M10-Smart M2 RS420 AresC640
Values:
  • id – Netflow protocol version

system netflow refresh-rate <u32>
SDE M10-Smart M2 RS420 AresC640
Values:
  • u32 – NetFlow v9/IPFIX refresh rate (packets)

system netflow send-buffer <u32>
SDE M10-Smart M2 RS420 AresC640
Values:
  • u32 – Udp socket SNDBUF size (in bytes)

system netflow ssl-server
SDE M10-Smart M2 RS420 AresC640

Collect and export ssl server name identifier

system netflow timeout
SDE M10-Smart M2 RS420 AresC640

Netflow timeouts

system netflow timeout active <u32>
SDE M10-Smart M2 RS420 AresC640
Values:
  • u32 – Active flows timeout in seconds

system netflow timeout inactive <u32>
SDE M10-Smart M2 RS420 AresC640
Values:
  • u32 – Inactive flows timeout in seconds

system netflow timeout rate <u32>
SDE M10-Smart M2 RS420 AresC640
Values:
  • u32 – NetFlow v9/IPFIX timeout rate (minutes)

system netflow vrf-mark <id>
SDE M10-Smart M2 RS420 AresC640

Choose a vrf to mark netflow traffic

Reference:

system vrf <id>

Instances:

Multiple

system netflow vrf-mark <id> name <id>
SDE M10-Smart M2 RS420 AresC640
Values:
  • id – Name of mark-tag