YAF Flow Probe Configuration

You can perform YAF Flow Probe configuration using the following steps:

sudo yaf –in eth0 –live pcap –out {NETFLOW_SERVER_IP} –ipfix udp –ipfix-port={NETFLOW_SERVER_LISTENER_PORT} –stats=300 –mac –idle-timeout=60 –active-timeout=60 –udp-temp-timeout=300 –force-read-all –silk –observation-domain=42 –flow-stats –delta –ingress=1 –egress=1 –max-payload=128 –export-payload –udp-payload –entropy –applabel –p0fprint –fpexport