User Tools

Site Tools


tips:ingress-egress-netflow

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
tips:ingress-egress-netflow [2020/11/27 15:18] – [Configuration options in Trisul] veeratips:ingress-egress-netflow [2020/11/27 16:05] (current) – [Enabling Ingress and Egress Netflow - issues and valid use cases] veera
Line 7: Line 7:
 Netflow has historically been an ingress only technology. Later versions of Netflow added the option to enable netflow at the egress interface as well.  One way wonder how an analyst can get both the interfaces if Netflow is enabled in one direction only.  The answer lies in the structure of the Netflow record.  Every Netflow record contains both the ingress and egress interface numbers.  Netflow has historically been an ingress only technology. Later versions of Netflow added the option to enable netflow at the egress interface as well.  One way wonder how an analyst can get both the interfaces if Netflow is enabled in one direction only.  The answer lies in the structure of the Netflow record.  Every Netflow record contains both the ingress and egress interface numbers. 
  
-<note>Recommended: We recommend for most users to enable ingress netflow only on all interfaces.</note> +<note>**Recommended**: We recommend for most users to enable ingress netflow only on all interfaces.</note> 
  
 ===== Enabling both ingress and egress can result in inconsistent data ===== ===== Enabling both ingress and egress can result in inconsistent data =====
tips/ingress-egress-netflow.txt · Last modified: 2020/11/27 16:05 by veera