Collect data using Cisco NetFlow

Most recent version: v0.1.0

See the changelog of this Listener type here.

Overview

Onum supports integration with Cisco NetFlow.

Cisco NetFlow is a network protocol developed by Cisco for collecting and analyzing IP network traffic data. It enables network administrators to understand traffic patterns, identify potential issues, and optimize network performance.

Cisco NetFlow Setup

In order to begin listening for data, you must first:

  • Enable IP routing

  • Enable Cisco Express Forwarding (CEF)

See the Cisco Netflow configuration guide for help with this.

Onum Setup

1

Log in to your Onum tenant and click Listeners > New listener.

2

Double-click the Cisco NetFlow Listener.

3

Enter a Name for the new Listener. Optionally, add a Description and some Tags to identify the Listener.

4

In the Socket section, enter the following:

  • Transport protocol* - Currently, Onum only supports the UDP protocol.

  • Port* - Enter the required IP port number. By default, Cisco NetFlow typically uses UDP port 2055 for exporting flow data.

5

Configure the Flow parameters

  • Protocols to process*

    Select the required protocol(s) from the list.

    • NetFlow v5 is the most widely used version.

    • NetFlow v9 is more customizable than v5.

    • IPFIX is based on the IPFIX standard (IP Flow Information Export).

    • Sflowv5 is another flow monitoring protocol that is typically used in high-speed networks.

  • Fields to include* - Select all the fields you wish to include in the output data.

6

Choose your Access control type* to selectively monitor traffic based on specific IPs:

  • None - allows all IPs.

  • Whitelist - allows certain IPs through.

  • Blacklist - blocks certain IPs from being captured or exported.

Enter the IPs you wish to apply the access control to. Click Add element to add as many as required.

7

Finally, click Create labels. Optionally, you can set labels to be used for internal Onum routing of data. By default, data will be set as Unlabeled. Click Create listener when you're done.

Last updated

Was this helpful?