Flexible NetFlow and NBAR integration


If a router supports flexible netflow (FNF), then the NBAR data can be collected without polling. To do so,

1. Go to the interface from NetFlow Analyzer.

2. Click on the "NBAR" tab for that interface.

3. In the NBAR tab, click on the "FNF" radio button

Configuring Flexible NetFlow for Network Based Application Recognition

The FNF/NBAR feature is easily enabled by conguring an additional "application name" field in the flow record configuration sub-mode.

 

This may be configured as a key field under the "match" keyword, or as a non-key field under the "collect" keyword.

 

router (config-flow-record) #match application name

 

The flow record is then configured in flow monitors, and the flow monitors configured on interfaces as usual for Flexible NetFlow.

 

Example:

 

The following example uses Network Based Application Recognition (NBAR) to create different flows for each application seen between any two IP hosts by applying a flow monitor having a flow record that collects the application name as a key field.

This sample starts in global configuration mode:

!

flow record rm_1

match application name

match ipv4 source address

match ipv4 destination address

collect interface input

collect interface output

collect counter packets

!

flow monitor mm_1

record rm_1

!

interface FastEthernet0/0

ip address 172.16.2.2 255.255.255.0

ip flow monitor mm_1 input

!

end

 

Flexible Netflow Related Documents

Related Topic
Document Title

Cisco IOS commands

Cisco IOS Master Commands List, All Releases

Overview of Flexible NetFlow

"Cisco IOS Flexible NetFlow Overview"

Flexible NetFlow Feature Roadmap

"Cisco IOS Flexible NetFlow Features Roadmap"

Emulating original NetFlow with Flexible NetFlow

"Getting Started with Configuring Cisco IOS Flexible NetFlow"

Configuring flow exporters to export Flexible NetFlow data.

"Configuring Data Export for Cisco IOS Flexible NetFlow with Flow Exporters"

Configuring flow sampling to reduce the overhead of monitoring traffic with Flexible NetFlow

"Using Cisco IOS Flexible NetFlow Flow Sampling to Reduce the CPU Overhead of Analyzing Traffic"

Configuring Flexible NetFlow using predefined records

"Configuring Cisco IOS Flexible NetFlow with Predefined Records"

Using Flexible NetFlow Top N Talkers to analyze network traffic

"Using Cisco IOS Flexible NetFlow Top N Talkers to Analyze Network Traffic"

Configuring IPv4 multicast statistics support for Flexible NetFlow

"Configuring IPv4 Multicast Statistics Support for Cisco IOS Flexible NetFlow"

Configuration commands for Flexible NetFlow

Cisco IOS Flexible NetFlow Command Reference

 

Copyright © 2010, ZOHO Corp. All Rights Reserved.
ManageEngine