Feature Request: Support for Cisco FLEXIBLE NETFLOW to support Layer-2 ports on Cisco 6513 switches

We have some Cisco 6513 switches and have the need to use Netflow on ports where we have Checkpoint firewalls plugged in (Layer 2).

I'm told only Cisco's "Flexible Netflow" (released around December 2008) will support Layer-2 on these particular model switches/ports.

Does anyone else have this need for Flexible Netflow with Orion NTA?

Thanks.

Find more posts tagged with

Accepted answers

All comments

chris.lapoint

It's something that we're looking at for a future release, but we're looking for more demand from customers to help us prioritize. If there are others interested in flexible NetFlow, please chime in.

For internal folks, we're tracking this as #3164

jcooler

Please add me to this feature request. I really need to be able to get my netflow data from remote routers. Due to Corporate Policy, all our links must be encrypted. Therefore, I cannot get netflow data unless I use flexible netflow.

instantnash

Hi Chris

Normal NetFlow doesn't pick up all traffic in a VPN however Flexible NetFlow picks up all data. The Scrutinizer product does support this so we have been getting requests from partners for the release data for Flexible NetFlow in the SolarWinds NetFlow Module. I think there is some demand.

Thanks

Adam

dclick

Put my name on that list as well. I am beginning to see a need to monitor the traffic of my VPN users from time to time.

memnoch25

Add my name to that list as well.

FnF and the ability to choose what fields (AS number, etc) to report would be a very useful tool!

SamuelB

Add my name to the list as well. I just encountered the need for layer 2 netflow on my 6500's that flexible NetFlow would solve.

ecklerwr1

It looks like there are a lot of new variables involved with flexible netflow:

Flexible NetFlow can track a wide range of packet information for Layer2, IPv4, IPv6 Flows.

• Source and destination Mac Addresses

• Source and destination IPv4 or IPv6 addresses

• Source and destination TCP/User Datagram Protocol (UDP) ports

• Type of service (ToS)

• DSCP

• Packet and byte counts

• Flow timestamps

• Input and output interface numbers

• TCP flags and encapsulated protocol (TCP/UDP) and individual TCP Flags

• Sections of packet for deep packet inspection

• All fields in IPv4 Header including IP-ID, TTL and others

• All fields in IPv6 Header including Flow Label, Option Header and others

• Routing information (next-hop address, source autonomous system (AS) number, destination AS number, source prefix mask, destination prefix mask, BGP Next Hop, BGP Policy Accounting traffic index)

gaudrmi0

I also would need flexible netflow support for my 6509s.

thanks!

chris.lapoint

Thanks guys, keep the feedback coming. For internal folks, I've added some ticks on the number of folks requesting.

selltekk

I am new to netflow, so I am not totally sure if this will apply to me. We have several 6509/13's with FWSMs installed. I am currently unable to configure netflow on the vlans defined on the FWSMs. I believe that being able to configure netflow on the associated layer 2 physical ports that the vlans trunk through would solve my issue.

Please correct me if I am mistaken. If I am wrong, is there a way to configure netflow on a physical port?

Questionario

Rochelle

The Scrutinizer product does support this so we have been getting requests from partners for the release data for Flexible NetFlow in the SolarWinds NetFlow Module.

ctopaloglu

If it is still not implemented. Please update this request as a feature request. And add me to the list.

Thanks.