Configuring Netflow profiles

This section is located at the libraries netflow-profiles level.

To create a Netflow profile, use the following command:

Admin@nodename# create libraries netflow-profiles <parameter>

Provide the following profile parameters:

Parameter

Description

name

Netflow profile name.

description

Profile description.

ip

IP address of a Netflow collector to which the sensor will send the statistics.

port

UDP port on which the Netflow collector will receive the statistics.

protocol

Netflow protocol version to use (it should be identical on the sensor and the collector):

  • 5: Netflow, version 5.

  • 9: Netflow, version 9.

  • 10: Netflow, version 10.

active-timeout

Time after which statistics will be sent to the collector without waiting for the flow to finish (e.g., transferring a large file over the network). In seconds. Default value: 1800 seconds; maximum value: 3600 seconds.

inactive-timeout

Time allowed for termination of an inactive flow (in seconds). Default value --- 15 seconds; maximum value --- 3600 seconds.

max-flows

Maximum number of counted flows from which statistics are gathered and sent. After the specified number of flows is reached, all subsequent flows will not be counted (this limitation is necessary to ensure protection against DoS attacks); default value --- 2000000; to remove the limitation, set this parameter to 0.

nat-events

Enable/disable sending information about NAT conversions to Netflow statistics:

  • on

  • off

refresh-rate

Number of packets; after it is reached the template is sent to the receiving host (only for NetFlow 9/10). The template contains information about the configuration of the device and various statistical information. The default value is 20 packets.

timeout-rate

Time after which the old template is sent to the receiving host (Netflow 9/10 versions only). The template contains information about the configuration of the device and various statistical information. The default value is 1800 seconds.

To edit an existing profile, use the following command:

Admin@nodename# set libraries netflow-profiles <profile-name>

The parameters you can change the values of are listed in the table above.

To delete a Netflow profile, use the following command:

Admin@nodename# delete libraries netflow-profiles <profile-name>

To display information about all or individual Netflow profiles, use the following commands:

Admin@nodename# show libraries netflow-profiles Admin@nodename# show libraries netflow-profiles <profile-name>