How does NetFlow work?Ĭisco NetFlow includes the following components:Īn IP flow is a group of packets with a specific set of IP packet attributes, and each packet within a switch or router that is forwarded includes the following information:
IPFIX, often referred to as NetFlow v10, builds on NetFlow v9 for most of its features, but it's simply an industry standardized version of NetFlow.
The packet format in NetFlow v9 is dynamic and this version has FNF capability, making it flexible. Meanwhile, NetFlow version 9 is slowly gaining popularity. Version 5 brought in multiple enhancements like BGP AS information and flow sequence numbers.Īlthough versions 7 and 8 had a few enhancements, they're no longer in use. NetFlow v5 has a fixed packet format, making netflow traffic monitoring and reporting easier since the contents of each packet are quickly identifiable. NetFlow v5 is the most popular version and is still supported by many router brands. Versions 2, 3, and 4 were only available as internal releases. The first NetFlow format was supported in all the initial NetFlow releases. The recorded information can be used for usage monitoring, anomaly detection, and various other network management tasks. NetFlow analyzes the flow data it collects to provide visibility on traffic flow and volume, as well as track where traffic is coming from, where it's going, and how much traffic is being generated at any time. NetFlow, the most widely-used standard for flow data statistics, was developed by Cisco to monitor and record all traffic as it passes in to or out of an interface.
0 kommentar(er)
