Cisco Netflow
Interface mode :
ip route-cache flow
!
config mode :
ip flow-cache timeout inactive 30
ip flow-cache timeout active 60
ip flow-cache entries 10240
ip flow-egress input-interface
ip flow-capture vlan-id
ip flow-capture ip-id
ip flow-export source vlan 2
ip flow-export version 5
ip flow-export destination 192.168.2.4 9996
ip flow-top-talkers
top 10
sort-by bytes
cache-timeout 3600000
match protocol tcp
!
ip flow-capture packet-length
ip flow-capture ttl
ip flow-capture mac-addresses
!
ip route 192.168.2.4 255.255.255.255 (Wan Interface ip address)
“If going over ipsec vpn. To force packets to traverse the vpn link”.
!
show ip cache flow