Versions Compared

Version Old Version 1 New Version Current
Changes made by

Jenni Wallin

Former user

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

You open the NetFlow agent configuration dialog from a workflow configuration: you can right-click the agent icon and select Configuration..., or double-click the agent icon.

Connection Tab

NetFlow agent configuration dialog - Connection tab

FieldDescription

Port

The port number where the NetFlow agent will listen for packets from the routers.

Note
titleNote!

Since the routers will be configured to communicate with a specific host on this port, it is important that the workflow containing the NetFlow agent is configured to execute on that specific host and not on a random host.

Two NetFlow agents may not be configured to listen on the same port on the same host.


Only from Pre-defined HostsIf enabled, the agent will only accept packets from hosts specified in the Interface Mapping tab. Data from other hosts will be discarded.

If disabled, all arriving data will be accepted. This may be suitable if a combination of routers is used. When a majority of the routers only send from one interface (IP-address) each, and some is set according to the Interface Mapping tab. Hence, when disabling this option, the one-interface-routers do not have to be added to the interface mapping list.

Warn on Sequence Gap  Determines if a warning will be raised in the System Log when the sequence number gap between two sequential PDUs from the same router is equal to or larger than specified in the Minimum Gap.
Minimum GapThe minimum sequence number gap between two flow records that will cause warning in the System Log.
Receive Buffer Size

Enter the buffer size for messages to read in this field. The value should not exceed the value set for the kernel parameter net.core.rem_max.

Info
titleExample on how to set the kernel parameters


Code Block
languagetext
themeEclipse
$ sudo sysctl -w net.core.rmem_max=18388600 
$ sudo sysctl -w net.core.netdev_max_backlog=100000



UDR Type Tab


NetFlow agent configuration dialog - UDR Type tab

FieldDescription
UDR TypeUDR Types expected to be delivered to this agent. If other types arrive, the NetFlow agent will abort.

Interface Mapping Tab


NetFlow agent configuration dialog Interface Mapping tab

...

FieldDescription
Main IP Address  Each router that supports multiple interfaces must add one adress to this list. When an existing row is selected, the content in the IP Address table will reflect the slave IP addresses for the selected Main IP Addresses.
IP AddressesAdditional IP addresses mapped to their corresponding main IP address by the agent.


Scroll ignore
scroll-viewportfalse
scroll-pdftrue
scroll-officefalse
scroll-chmtrue
scroll-docbooktrue
scroll-eclipsehelptrue
scroll-epubtrue
scroll-htmlfalse


Next: