Overview

Flexible NetFlow consists of components that can be used together in several variations to perform traffic analysis and data export. sFlow is an embedded technology – it is implemented through dedicated hardware chips embedded in the router/switch.

Steps to follow

The following commands configure a NETGEAR switch (source IP), sampling packets at 1-in-512, polling counters every 30 seconds, and sending sFlow to an analyzer (CCE IP) over UDP using the default sFlow port (6343).

sflow receiver 1 ip(CCE_IP)

sflow receiver 1 owner NetMonitor timeout 31536000

interface (Gigabitethernet1/0/1)

sflow sampler 1

sflow sampler rate 1024
sflow sampler maxheadersize 64

Confirm the Configuration

show sflow receivers
show sflow samplers

Verification

Login to UI >> SYSTEM>> LOGS AND FLOWS COLLECTION STATUS .

From CCE:

Run the cmd on CCE server to check for sflow.

sudo tcpdump -i any port 6343 and host <switch ip>