Table of Contents
How do I use NetFlow on my Network?
Using NetFlow requires three pieces: Flow exporter: an appliance or network device (usually a router or firewall) in charge of collecting flow information and exporting it to a flow collector. Flow collector: an appliance or server that receives exported flow information.
What are the benefits of NetFlow monitoring?
By analyzing NetFlow data, you can get a picture of network traffic flow and volume. NetFlow is a one-way technology, so when the server responds to the initial client request, the process works in reverse and creates a new flow record. Using a NetFlow monitoring solution can allow you to monitor and analyze these flow records more efficiently
What is a NetFlow analyzer?
Flow analyzer: an application that analyzes flow information collected by the flow collector. Generating NetFlow data starts at the network device when a packet arrives. First, the device checks if the packet’s 5-tuple is present in a table of recently seen flows called the flow cache.
How do I configure VNICs for NetFlow flow monitor?
Click LAN > NetFlow Monitoring > Flow Monitor Sessions and select the Flow Monitor Session you want to configure. Set the Flow Exporter Profile default and then go to Properties and expand the vNICs option. Click the Add button and then select which vNIC you want to use with the flow monitor session.
How are packets classified as in the same flow in NetFlow?
When packets arrive at the NetFlow Exporter, each of them is inspected for one or many IP packet attributes. These attributes are used to determine if the packet is unique or similar to other packets. If it is similar then it is classified as in the same flow.
What is sampled NetFlow?
Sampled NetFlow is the statistical sampling of packets: one packet from a certain range are processed by NetFlow and the rest are skipped. Statistical sampling preserves most of the important flow properties, as long as the analyzer is aware that sampling is enabled.