CCIE lab Knowledge Point: Introduction to NetFlow

CCNA 200-301

CCNA 200-301

CCNP Enterprise

CCNP Enterprise

CCNP Security

CCNP Security

CCIE Enterprise Lab

CCIE Enterprise Lab

CCIE Security Lab

CCIE Security Lab

CCNP Service Provider

CCNP Service Provider

CCNP Data Center

CCNP Data Center

CCNP Collaboration

CCNP Collaboration

CCIE DC Lab

CCIE DC Lab

ic_r
ic_l
CCIE lab Knowledge Point: Introduction to NetFlow
images

As we know that we passed ccie written dumps, we have to prepare for ccie lab plan. Today,we will present some ccie dumps for u.

(1) NetFlow Overview

NetFlow is a toolkit released by Cisco for analyzing network packet information. Different schemes are customized according to different needs. Typically, it analyzes the source address and destination address of network data, analyzes various applications of traffic, or Statistics on the load of each port on the router. Statistics can be performed on the following parameters: addr, dstaddr, port, dstport, protocol, ToS, input interface, output interface, nexthop, masked, Packet count, byte count, flow count, and so on.

NetFlow is a data exchange method. NetFlow uses the standard switching mode to process the first IP packet data of the data stream, and generates a NetFlow buffer. Then the same data is transmitted in the same data stream based on the cache information, and no longer matches the relevant data. For policies such as access control, the NetFlow cache also contains statistics for subsequent data streams. NetFlow not only records the amount of data, but also records information such as protocols.

Netflow provides a session-level view of network traffic, recording information about each TCP/IP transaction. Maybe it can't provide a complete record of network traffic like tcp dump, but when brought together, it's easier to manage and read.

Data collection: NetFlow data sent by routers can be stored on the server using NetFlow data acquisition software for further processing using various NetFlow data analysis tools.

(2) NetFlow version

There are four versions of NetFlow developed by Cisco, namely ver 1 , ver 5 , ver 8, ver 9, which are characterized by:

V9 is not backward compatible with v8 and v5 and needs to be turned on independently.

V8 only supports aggregate caching and does not support new features.

V5 only supports the main cache and does not support new features.

V1, do not use, it is recommended to use 5 and 9.


(3) NetFlow configuration requirements

Netflow captures packets on network devices and performs them independently on each device. It does not require all devices to be enabled.

Configure Netflow conditions:

The routing function must be enabled first.

CEF will open

And it will consume extra CPU and memory resources.


Just as above mention, CCIE dumps is very important to prepare the ccie lab exam.