User Tools

Site Tools


network_stuff:flow_information

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
network_stuff:flow_information [2023/05/13 08:16] jotasandokunetwork_stuff:flow_information [2023/11/02 14:38] (current) – external edit 127.0.0.1
Line 27: Line 27:
    ip flow monitor Flow-monitor sampler Flow-sampler input    ip flow monitor Flow-monitor sampler Flow-sampler input
        
-Netflow in ubuntu or FRR:+Netflow in ubuntu or FRR (agent):
 \\ \\
   FRR01:~# systemctl status pmacctd.service   FRR01:~# systemctl status pmacctd.service
Line 58: Line 58:
   pre_tag_map: /etc/pmacct/pretag.map   pre_tag_map: /etc/pmacct/pretag.map
   timestamps_secs: true   timestamps_secs: true
-  + 
 +SFLOW collector: 
 +  * The default open source collector is : [[http://www.pmacct.net/]]
  
 ---- ----
 **__SFLOW__** **__SFLOW__**
 +  * sampled frames + interface counter + flow-tuple data. All in the same packet
 +  * sflow is configurable via SNMP mibs
 +
 +  * Flow sample (conceptually one in each sflow packet but in reality we pack more than 1). It lists things like: ingress egress. ifindex and  <del>sampling rate</del>
 +    * Flow record (the frame header with a little bit of metadata (like header protocol (eg: Ethernet))
 +
 +
 \\ \\
  SFLOW IN LINUX / FRR:  SFLOW IN LINUX / FRR:
Line 100: Line 109:
 \\ \\
 In Arista: In Arista:
 +  * Arista Networks DCS-7060CX-32S: Hardware Sample Rate for SW sFlow: 4096 / Polling Interval (sec): 2.0 (default).
 +
   sflow run   sflow run
   sflow interface disable default   sflow interface disable default
Line 118: Line 129:
   !   !
   show sflow detail   show sflow detail
 +  
 +In Junos
 +  set protocols sflow polling-interval 2 # interval for sending data to the collector
 +  set protocols sflow sample-rate ingress 4096 # packet sampling rate. Packets are sampled at random intervals
 +  set protocols sflow source-ip 1.1.1.1
 +  set protocols sflow collector 2.2.2.2 udp-port 6343
 +  set protocols sflow interfaces xe-0/0/0:0.0
 +  ibr-0-0-1 protocols sflow
 +  set protocols sflow agent-id 1.1.1.1
 +  set protocols sflow polling-interval 1
 +  set protocols sflow sample-rate ingress 1024
 +  set protocols sflow source-ip 1.1.1.1
 +  set protocols sflow collector 2.2.2.2 udp-port 6343
 +  set protocols sflow interfaces xe-0/0/0:0.0
 +  
 +In Cisco (IOS-XR): [[https://blog.sflow.com/2022/02/cisco-ncs-5500-series-routers.html]]
network_stuff/flow_information.1683965766.txt.gz · Last modified: (external edit)