3. CISCO Catalyst 9300 CISCO DNA Advantage - NetFlow
#Netflow
https://www.plixer.com/blog/cisco-cat...
flow record FNF-input
description IPv4 NetFlow
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match ipv4 protocol
match interface input
match ipv4 tos
match flow direction
collect interface output
collect counter bytes long
collect counter packets long
collect transport tcp flags
collect timestamp absolute first
collect timestamp absolute last
flow record FNF-output
description IPv4 NetFlow
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match ipv4 protocol
match interface output
match ipv4 tos
match flow direction
collect interface input
collect counter bytes long
collect counter packets long
collect transport tcp flags
collect timestamp absolute first
collect timestamp absolute last
flow exporter 192.168.102.100
destination 192.168.102.100
source vlan 102
transport udp 2055
template data timeout 60
flow monitor Scrut_mon_input
description IPv4 FNF ingress exports
exporter 192.168.102.100
record FNF-input
cache timeout active 60
flow monitor Scrut_mon_output
description IPv4 FNF egress exports
exporter 192.168.102.100
record FNF-output
cache timeout active 60
interface GigabitEthernet1/0/2
ip flow monitor Scrut_mon_input input
ip flow monitor Scrut_mon_output output
#Sampled Netflow
https://www.plixer.com/blog/cisco-net...
sampler sampler
mode random 1 out-of 2
interface GigabitEthernet1/0/2
ip flow monitor Scrut_mon_input sampler sampler input
ip flow monitor Scrut_mon_output sampler sampler output
show flow monitor Scrut_mon_input cache format table