{"id":246,"date":"2014-03-11T10:34:11","date_gmt":"2014-03-11T01:34:11","guid":{"rendered":"https:\/\/www.manageengine.jp\/support\/kb\/NetFlow_Analyzer\/?p=246"},"modified":"2025-03-17T10:41:32","modified_gmt":"2025-03-17T01:41:32","slug":"cisco-%e6%a9%9f%e5%99%a8%e3%81%a7%e3%81%aenetflow-lite-%e8%a8%ad%e5%ae%9a%e4%be%8b","status":"publish","type":"post","link":"https:\/\/www.manageengine.jp\/support\/kb\/NetFlow_Analyzer\/?p=246","title":{"rendered":"Cisco \u6a5f\u5668\u3067\u306eNetFlow-Lite \u8a2d\u5b9a\u4f8b"},"content":{"rendered":"<p>\u4ee5\u4e0b\u306f\u3001NetFlow-Lite\u7528\u30b3\u30f3\u30d5\u30a3\u30b0\u306e\u30b5\u30f3\u30d7\u30eb\u3067\u3059\u3002<br \/>\n<span style=\"color: #ff0000\">\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u88c5\u7f6e\u306e\u8a73\u7d30\u3084\u6700\u65b0\u60c5\u5831\u306f\u3001\u3079\u30f3\u30c0\u30fc\u69d8\u3084\u30e1\u30fc\u30ab\u30fc\u69d8\u306b\u3054\u78ba\u8a8d\u3092\u304a\u9858\u3044\u3044\u305f\u3057\u307e\u3059\u3002<\/span><\/p>\n<p>&nbsp;<\/p>\n[NetFlow-Lite \u8a2d\u5b9a\u4f8b]\n<p>(\u5bfe\u8c61:Cisco IOS 15.0(2)EX1 \u4ee5\u964d)<\/p>\n[Flow Record \u8a2d\u5b9a]\n<p>Switch(config)# flow record NfliteRecord<\/p>\n<p>Switch(config-flow-record)# collect counter bytes long<\/p>\n<p>Switch(config-flow-record)# collect counter packets long<\/p>\n<p>Switch(config-flow-record)# collect flow sampler<\/p>\n<p>Switch(config-flow-record)# collect interface input<\/p>\n<p>Switch(config-flow-record)# collect timestamp sys-uptime first<\/p>\n<p>Switch(config-flow-record)# collect timestamp sys-uptime last<\/p>\n<p>Switch(config-flow-record)# collect transport tcp flags ack<\/p>\n<p>Switch(config-flow-record)# collect transport tcp flags fin<\/p>\n<p>Switch(config-flow-record)# collect transport tcp flags rst<\/p>\n<p>Switch(config-flow-record)# match ipv4 protocol<\/p>\n<p>Switch(config-flow-record)# match ipv4 destination address<\/p>\n<p>Switch(config-flow-record)# match ipv4 source address<\/p>\n<p>Switch(config-flow-record)# match ipv4 tos<\/p>\n<p>Switch(config-flow-record)# match ipv6 protocol \/\/ [\u30aa\u30d7\u30b7\u30e7\u30f3 : IPv6 \u306e\u307f]\n<p>Switch(config-flow-record)# match ipv6 destination address \/\/ [\u30aa\u30d7\u30b7\u30e7\u30f3 : IPv6 \u306e\u307f]\n<p>Switch(config-flow-record)# match ipv6 source address \/\/ [\u30aa\u30d7\u30b7\u30e7\u30f3 : IPv6 \u306e\u307f]\n<p>Switch(config-flow-record)# match ipv6 tos \/\/ [\u30aa\u30d7\u30b7\u30e7\u30f3 : IPv6 \u306e\u307f]\n<p>Switch(config-flow-record)# match transport destination-port<\/p>\n<p>Switch(config-flow-record)# match transport source-port<\/p>\n[Flow Exporter \u8a2d\u5b9a]\n<p>Switch(config)# flow exporter NfliteExporter<\/p>\n<p>Switch(config-flow-exporter)# destination 10.10.10.10 \/\/ [NetFlow Analyzer \u306eIP \u30a2\u30c9\u30ec\u30b9]\n<p>Switch(config-flow-exporter)# export-protocol netflow-v9<\/p>\n<p>Switch(config-flow-exporter)# option interface-table<\/p>\n<p>Switch(config-flow-exporter)# option exporter-stats<\/p>\n<p>Switch(config-flow-exporter)# option sampler-table<\/p>\n<p>Switch(config-flow-exporter)# source loopback 0 \/\/ [source interface \u3068\u3057\u3066\u306f\u4efb\u610f\u306eL3 \u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9\u306e\u6307\u5b9a\u304c\u53ef\u80fd]\n<p>Switch(config-flow-exporter)# template data timeout 60<\/p>\n<p>Switch(config-flow-exporter)# transport udp 9996<\/p>\n[Flow Monitor \u8a2d\u5b9a]\n<p>Switch(config)# flow monitor NfliteMonitor<\/p>\n<p>Switch(config-flow-monitor)# record NfliteRecord<\/p>\n<p>Switch(config-flow-monitor)# exporter NfliteExporter<\/p>\n<p>Switch(config-flow-monitor)# cache timeout active 60<\/p>\n<p>Switch(config-flow-monitor)# cache timeout inactive 15<\/p>\n<p>Switch(config-flow-monitor)# cache type normal<\/p>\n<p>Switch(config-flow-monitor)# statistics packet protocol<\/p>\n[Flow Sampler \u8a2d\u5b9a]\n<p>Switch(config)# sampler NfliteSampler<\/p>\n<p>Switch(config-sampler)# mode random 1 out-of 32 \/\/ [\u3053\u3053\u3067\u306e\u5024\u306f32 \u304b\u3089 1022 \u306e\u9593]\n[Flow Monitor \u306e\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9\u3078\u306e\u5272\u308a\u5f53\u3066]\n<p>Switch(config)# interface gigabitethernet 0\/0<\/p>\n<p>Switch(config-if)# ip flow monitor NfliteMonitor sampler NfliteSampler input \/\/ [\u3059\u3079\u3066\u306e\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9\u306b\u3064\u3044\u3066\u3001\u3053\u306e\u8a2d\u5b9a\u3092\u5b9f\u65bd]\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u4ee5\u4e0b\u306f\u3001NetFlow-Lite\u7528\u30b3\u30f3\u30d5\u30a3\u30b0\u306e\u30b5\u30f3\u30d7\u30eb\u3067\u3059\u3002 \u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u88c5\u7f6e\u306e\u8a73\u7d30\u3084\u6700\u65b0\u60c5\u5831\u306f\u3001\u3079\u30f3\u30c0\u30fc\u69d8\u3084\u30e1\u30fc\u30ab\u30fc\u69d8\u306b\u3054\u78ba\u8a8d\u3092\u304a\u9858\u3044\u3044\u305f\u3057\u307e\u3059\u3002 \u2026 <a href=\"https:\/\/www.manageengine.jp\/support\/kb\/NetFlow_Analyzer\/?p=246\" class=\"more\">\uff3b\u7d9a\u304d\u3092\u8aad\u3080\uff3d<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_lmt_disableupdate":"no","_lmt_disable":"","footnotes":""},"categories":[62],"tags":[369],"class_list":["post-246","post","type-post","status-publish","format-standard","hentry","category-config-nfa","tag-netflow-lite"],"modified_by":null,"_links":{"self":[{"href":"https:\/\/www.manageengine.jp\/support\/kb\/NetFlow_Analyzer\/index.php?rest_route=\/wp\/v2\/posts\/246","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.manageengine.jp\/support\/kb\/NetFlow_Analyzer\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.manageengine.jp\/support\/kb\/NetFlow_Analyzer\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.manageengine.jp\/support\/kb\/NetFlow_Analyzer\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.manageengine.jp\/support\/kb\/NetFlow_Analyzer\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=246"}],"version-history":[{"count":8,"href":"https:\/\/www.manageengine.jp\/support\/kb\/NetFlow_Analyzer\/index.php?rest_route=\/wp\/v2\/posts\/246\/revisions"}],"predecessor-version":[{"id":8169,"href":"https:\/\/www.manageengine.jp\/support\/kb\/NetFlow_Analyzer\/index.php?rest_route=\/wp\/v2\/posts\/246\/revisions\/8169"}],"wp:attachment":[{"href":"https:\/\/www.manageengine.jp\/support\/kb\/NetFlow_Analyzer\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=246"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.manageengine.jp\/support\/kb\/NetFlow_Analyzer\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=246"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.manageengine.jp\/support\/kb\/NetFlow_Analyzer\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=246"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}