Hello,
I have configured my cisco ISR router for netflow. I have used solarwinds configuration template for flexible netflow. I am only seeing outside flows meaning public IPs. The flows provided by the netflow are almost useless to me. I need to know the individual user traffic utilization. I have attached the below monitor to all my interfaces (inside,outside,tunnel) Any help? What am I missing?
flow record NETFLOW_FLOW match ipv4 tos match ipv4 protocol match ipv4 source address match ipv4 destination address match transport source-port match transport destination-port match interface input collect interface output collect counter bytes collect counter packets collect timestamp sys-uptime first collect timestamp sys-uptime last ! ! flow exporter NETFLOW_EXPORTER destination 10.255.0.23 source Tunnel0 transport udp 2055 ! ! flow monitor NETFLOW_MONITOR exporter NETFLOW_EXPORTER record NETFLOW_FLOW
.
