It is currently Wed Jul 15, 2020 5:20 pm

All times are UTC

Post new topic Reply to topic  [ 1 post ] 
Author Message
 Post subject: Netflow on Switched Virtual Interface
PostPosted: Thu Sep 12, 2013 12:45 pm 

Joined: Thu Sep 12, 2013 10:41 am
Posts: 1

I am playing around with some some router configurations to gather some NetFlow data from a GNS network. I have currently successfully configured the router to record NetFlow data of all communication through a routed interface. As a result, all network flows between the subnets involved are exported to my NetFlow collector.

This is perfectly fine for inter-subnet traffic, however I really want NetFlow data for internal traffic within a subnet. After extensive Googling I have come to the conclusion that I should have each switchport of a switching module access the same VLAN, then have a virtual interface associated with this VLAN which has NetFlow recording enabled which should then record and export the traffic which occurs within the VLAN.

After creating this setup I added two virtual machines to the switchports and had them connect to eachother via Netcat. Here is where the probelm occurrs, the NetFlow collector only recieves a single flow: from the source box to the destination box, which only has the SYN flag set. This would suggest the SVI is seeing the first packet of the TCP stream which is then logged as flow, but all other packets in the stream aren't seen by the SVI, presumably because they are being switched before they can be logged.

Is this behaviour normal and can it be avoided? If this behaviour is normal, how else can you enable NetFlow recording for traffic which is switched via a switching module?

Thanks very much,


Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 1 post ] 

All times are UTC

Who is online

Users browsing this forum: No registered users and 1 guest

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group