{"id":254,"date":"2014-04-04T16:29:59","date_gmt":"2014-04-04T07:29:59","guid":{"rendered":"https:\/\/www.manageengine.jp\/support\/kb\/NetFlow_Analyzer\/?p=254"},"modified":"2025-03-17T10:47:11","modified_gmt":"2025-03-17T01:47:11","slug":"flexible-netflow-%e3%81%ae%e8%a8%ad%e5%ae%9a%e4%be%8b","status":"publish","type":"post","link":"https:\/\/www.manageengine.jp\/support\/kb\/NetFlow_Analyzer\/?p=254","title":{"rendered":"Flexible NetFlow \u306e\u6982\u8981\u3068\u8a2d\u5b9a\u4f8b"},"content":{"rendered":"<p>\u4ee5\u4e0b\u306f\u3001Flexible NetFlow\u30b3\u30f3\u30d5\u30a3\u30b0\u306e\u30b5\u30f3\u30d7\u30eb\u3067\u3059\u3002<br \/>\n<span style=\"color: #ff0000\">\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u88c5\u7f6e\u306e\u6700\u65b0\u60c5\u5831\u3084\u8a73\u7d30\u306b\u95a2\u3057\u3066\u306f\u3001\u30d9\u30f3\u30c0\u30fc\u69d8\u3084\u30e1\u30fc\u30ab\u30fc\u69d8\u307e\u3067\u3054\u78ba\u8a8d\u3092\u304a\u9858\u3044\u3057\u307e\u3059\u3002<\/span><\/p>\n<p>&nbsp;<\/p>\n<h3>\u6982\u8981<\/h3>\n<p>Flexible NetFlow (FNF) \u306f\u3001\u4ee5\u4e0b\uff13\u9805\u76ee\u306e\u8a2d\u5b9a\u304c\u5fc5\u8981<\/p>\n<ol>\n<li>\"flow exporter\"<\/li>\n<li>\"flow record\"<\/li>\n<li>\"flow monitor\"<\/li>\n<\/ol>\n<p>&nbsp;<\/p>\n<p>1. flow exporter<br \/>\n\u30d5\u30ed\u30fc\u30c7\u30fc\u30bf\u306e\"\u9001\u4ed8\u5148\",\"UDP\u30dd\u30fc\u30c8\",\"\u9001\u4ed8\u5143\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9\"\u3092\u5b9a\u7fa9\u3065\u3051<\/p>\n<p>2.flow record<br \/>\n\u751f\u6210\u30d5\u30ed\u30fc\u306b\u95a2\u9023\u3059\u308b\"key\"\u3068\"non key\"\u3092\u5b9a\u7fa9\u3065\u3051<\/p>\n<p>3.flow monitor<br \/>\n\"flow exporter\",\"flow record\"\u4e21\u65b9\u306e\u7d50\u3073\u4ed8\u3051\u305f\u5f8c\u3001<br \/>\n\"flow monitor\"\u3068\u76e3\u8996\u5bfe\u8c61\u6a5f\u5668\u306e\u5168L3\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9\u3092\u95a2\u9023\u4ed8\u3051<\/p>\n<p>\u7279\u5b9a\u306eIP\u30a2\u30c9\u30ec\u30b9\u306b\u5411\u3051\u3001\u88c5\u7f6e\u304b\u3089NetFlow\u30c7\u30fc\u30bf\u304c\u9001\u4ed8<\/p>\n<p>&nbsp;<\/p>\n<div class=\"point\">\n<p>\u203b\"key\"\/\u00a0\"non key\" -&gt; \u30d5\u30ed\u30fc\u3092\u8b58\u5225\u3059\u308b\u8981\u7d20<\/p>\n<p>Key Field<\/p>\n<p>\u30fb\u3000\u9001\u4fe1\u5143IP\u30a2\u30c9\u30ec\u30b9<br \/>\n\u30fb\u3000\u3042\u3066\u5148IP\u30a2\u30c9\u30ec\u30b9<br \/>\n\u30fb\u3000TCP\/UDP\u30dd\u30fc\u30c8\u9001\u4fe1\u5143\u756a\u53f7<br \/>\n\u30fb\u3000TCP\/UDP\u30dd\u30fc\u30c8\u3042\u3066\u5148\u756a\u53f7<br \/>\n\u30fb\u3000L3\u30d7\u30ed\u30c8\u30b3\u30eb<br \/>\n\u30fb\u3000ToS\u30d0\u30a4\u30c8\uff08DSCP\uff09<br \/>\n\u30fb\u3000\u5165\u529b\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9<\/p>\n<p>Non Key Field<\/p>\n<p>\u30fb\u3000\u9001\u4fe1\u5143IP\u30a2\u30c9\u30ec\u30b9\/\u3042\u3066\u5148IP\u30a2\u30c9\u30ec\u30b9<br \/>\n\u30fb\u3000\u9001\u4fe1\u5143\u30dd\u30fc\u30c8\u756a\u53f7\/\u3042\u3066\u5148\u30dd\u30fc\u30c8\u756a\u53f7<br \/>\n\u30fb\u3000\u5165\u529b\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9\u3068\u51fa\u529b\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9<br \/>\n\u30fb\u3000ToS\u30d0\u30a4\u30c8\uff08DSCP\uff09<br \/>\n\u30fb\u3000\u30d5\u30ed\u30fc\u306e\u30d0\u30a4\u30c8\u6570\u3001\u30d1\u30b1\u30c3\u30c8\u6570<br \/>\n\u30fb\u3000\u9001\u4fe1\u5143AS\u756a\u53f7\u3001\u3042\u3066\u5148AS\u756a\u53f7<\/p>\n<\/div>\n<h3>\u8a2d\u5b9a\u4f8b<\/h3>\n<h5>[\u30b0\u30ed\u30fc\u30d0\u30eb \u30b3\u30f3\u30d5\u30a3\u30ae\u30e5\u30ec\u30fc\u30b7\u30e7\u30f3 \u30e2\u30fc\u30c9\u3092\u958b\u59cb]<\/h5>\n<p>configure terminal<\/p>\n<h5>[Flow Exporter \u8a2d\u5b9a]<\/h5>\n<p>flow exporter \u30a8\u30af\u30b9\u30dd\u30fc\u30bf\u540d<\/p>\n<p>destination \u30a8\u30af\u30b9\u30dd\u30fc\u30c8\u5148IP\u30a2\u30c9\u30ec\u30b9<\/p>\n<p>transport udp 9996<\/p>\n<p>template data timeout 60 (60\u79d2)<\/p>\n<div class=\"point\">\n<p class=\"p\">(Optional) Configures resending of templates based on a timeout.<br \/>\nThe range for the\u00a0<span class=\"ph synph\"><var>seconds<\/var>\u00a0<\/span>argument is 1 to 86400 (86400 seconds = 24 hours).<\/p>\n<\/div>\n<p>option interface-table timeout 60<\/p>\n<p>option application-table timeout 60<\/p>\n<p>&nbsp;<\/p>\n<h5>[Flow Record \u8a2d\u5b9a]<\/h5>\n<p>flow record \u30ec\u30b3\u30fc\u30c9\u540d<\/p>\n<p>match ipv4 tos<\/p>\n<p>match ipv4 protocol<\/p>\n<p>match ipv4 source address<\/p>\n<p>match ipv4 destination address<\/p>\n<p>match transport source-port<\/p>\n<p>match transport destination-port<\/p>\n<p>match interface input<\/p>\n<p>match interface output<\/p>\n<p>match flow sampler<\/p>\n<p>collect routing source as<\/p>\n<p>collect routing destination as<\/p>\n<p>collect routing next-hop address ipv4<\/p>\n<p>collect ipv4 source mask<\/p>\n<p>collect ipv4 destination mask<\/p>\n<p>collect transport tcp flags<\/p>\n<p>collect counter bytes<\/p>\n<p>collect counter packets<\/p>\n<p>collect timestamp sys-uptime first<\/p>\n<p>collect timestamp sys-uptime last<\/p>\n<p>&nbsp;<\/p>\n<h5>[Flow Monitor \u8a2d\u5b9a]<\/h5>\n<p>flow monitor \u30e2\u30cb\u30bf\u540d<\/p>\n<p>record \u30ec\u30b3\u30fc\u30c9\u540d<\/p>\n<p>exporter \u30a8\u30af\u30b9\u30dd\u30fc\u30bf\u540d<\/p>\n<p>cache timeout active 60(60\u79d2)<\/p>\n<p>cache timeout inactive 15(15\u79d2)<\/p>\n<p>&nbsp;<\/p>\n<h5>[NetFlow \u30a2\u30ab\u30a6\u30f3\u30c6\u30a3\u30f3\u30b0\u306b\u3064\u3044\u3066Flow Monitor \u306e\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9\u3078\u306e\u95a2\u9023\u4ed8\u3051]<\/h5>\n<p>1. \u5f53\u8a72\u88c5\u7f6e\u4e0a\u3067\u30011\u3064\u306e\u7269\u7406\u30dd\u30fc\u30c8\u306e\u307f\u76e3\u8996\u3059\u308b\u5834\u5408<\/p>\n<p>interface GigabitEthernet1\/1\/1<\/p>\n<p>ip flow monitor \u30e2\u30cb\u30bf\u540d input<br \/>\nip flow monitor \u30e2\u30cb\u30bf\u540d output<\/p>\n<p>exit<br \/>\n(input\u3068output\u306e\u4e21\u65b9\u5fc5\u8981)<\/p>\n<p>&nbsp;<\/p>\n<p>2. \u5f53\u8a72\u88c5\u7f6e\u4e0a\u3067\u3001\u3059\u3079\u3066\u306e\u7269\u7406\u30dd\u30fc\u30c8\u3092\u76e3\u8996\u3059\u308b\u5834\u5408<\/p>\n<p>interface GigabitEthernet1\/1\/1<\/p>\n<p>ip flow monitor \u30e2\u30cb\u30bf\u540d input<\/p>\n<p>exit<\/p>\n<p>interface GigabitEthernet1\/1\/2<\/p>\n<p>ip flow monitor \u30e2\u30cb\u30bf\u540d input<\/p>\n<p>exit<\/p>\n<p>interface GigabitEthernet1\/1\/3<\/p>\n<p>ip flow monitor \u30e2\u30cb\u30bf\u540d input<\/p>\n<p>exit<br \/>\n(input\u306b\u7d71\u4e00)<\/p>\n<p>&nbsp;<\/p>\n<p>3. \u5358\u4e00\u306eVLAN\u3092\u76e3\u8996\u3059\u308b\u4f8b<\/p>\n<p>Interface Vlan100<\/p>\n<p>ip flow monitor \u30e2\u30cb\u30bf\u540d input<br \/>\nip flow monitor \u30e2\u30cb\u30bf\u540d output<\/p>\n<p>exit<\/p>\n<p>&nbsp;<\/p>\n<p>\u203bip flow monitor \u306e\u8a2d\u5b9a\u306f\u3001\u5404\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9\u3084\u5404VLAN \u306b\u5bfe\u3057\u3066\u5fc5\u8981\u3068\u306a\u308a\u307e\u3059<br \/>\n\u203b\u901a\u4fe1\u304c\u5b58\u5728\u3059\u308b\u3059\u3079\u3066\u306e\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9\u3067\u30d5\u30ed\u30fc\u30e2\u30cb\u30bf\u30fc\u3092\u6709\u52b9\u5316\u3057\u307e\u3059<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u4ee5\u4e0b\u306f\u3001Flexible NetFlow\u30b3\u30f3\u30d5\u30a3\u30b0\u306e\u30b5\u30f3\u30d7\u30eb\u3067\u3059\u3002 \u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u88c5\u7f6e\u306e\u6700\u65b0\u60c5\u5831\u3084\u8a73\u7d30\u306b\u95a2\u3057\u3066\u306f\u3001\u30d9\u30f3\u30c0\u30fc\u69d8\u3084\u30e1\u30fc\u30ab\u30fc\u69d8\u307e\u3067\u3054\u78ba\u8a8d\u3092\u304a\u9858\u2026 <a href=\"https:\/\/www.manageengine.jp\/support\/kb\/NetFlow_Analyzer\/?p=254\" class=\"more\">\uff3b\u7d9a\u304d\u3092\u8aad\u3080\uff3d<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_lmt_disableupdate":"no","_lmt_disable":"","footnotes":""},"categories":[62],"tags":[],"class_list":["post-254","post","type-post","status-publish","format-standard","hentry","category-config-nfa"],"modified_by":null,"_links":{"self":[{"href":"https:\/\/www.manageengine.jp\/support\/kb\/NetFlow_Analyzer\/index.php?rest_route=\/wp\/v2\/posts\/254","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.manageengine.jp\/support\/kb\/NetFlow_Analyzer\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.manageengine.jp\/support\/kb\/NetFlow_Analyzer\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.manageengine.jp\/support\/kb\/NetFlow_Analyzer\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.manageengine.jp\/support\/kb\/NetFlow_Analyzer\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=254"}],"version-history":[{"count":23,"href":"https:\/\/www.manageengine.jp\/support\/kb\/NetFlow_Analyzer\/index.php?rest_route=\/wp\/v2\/posts\/254\/revisions"}],"predecessor-version":[{"id":8173,"href":"https:\/\/www.manageengine.jp\/support\/kb\/NetFlow_Analyzer\/index.php?rest_route=\/wp\/v2\/posts\/254\/revisions\/8173"}],"wp:attachment":[{"href":"https:\/\/www.manageengine.jp\/support\/kb\/NetFlow_Analyzer\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=254"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.manageengine.jp\/support\/kb\/NetFlow_Analyzer\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=254"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.manageengine.jp\/support\/kb\/NetFlow_Analyzer\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=254"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}