Cisco Catalyst 2960 Series, Configuration Manual

Page: 598 / 2288

Purpose Command
Collects the following transport TCP flags:
•
ack
—
TCP acknowledgement flag
• cwr — TCP congestion window reduced flag
•
ece
—
TCP ECN echo flag
•
fin
—
TCP finish flag
•
psh
— TCP push flag
•
rst
—
TCP reset flag
• syn — TCP synchronize flag
•
urg
—
TCP urgent flag
collect transport tcp flags
Collects the MAC addresses of the access points that
the wireless client is associated with.
Flow Exporters
Flow exporters export the data in the flow monitor cache to a remote system, such as a server running NetFlow
collector, for analysis and storage. Flow exporters are created as separate entities in the configuration. Flow
exporters are assigned to flow monitors to provide data export capability for the flow monitors. You can create
several flow exporters and assign them to one or more flow monitors to provide several export destinations.
You can create one flow exporter and apply it to several flow monitors.
NetFlow Data Export Format Version 9
The basic output of NetFlow is a flow record. Several different formats for flow records have evolved as
NetFlow has matured. The most recent evolution of the NetFlow export format is known as Version 9. The
distinguishing feature of the NetFlow Version 9 export format is that it is template-based. Templates provide
an extensible design to the record format, a feature that should allow future enhancements to NetFlow services
without requiring concurrent changes to the basic flow-record format. Using templates provides several key
benefits:
• Third-party business partners who produce applications that provide collector or display services for
NetFlow do not have to recompile their applications each time a new NetFlow feature is added. Instead,
they should be able to use an external data file that documents the known template formats.
• New features can be added to NetFlow quickly without breaking current implementations.
•
NetFlow is
“
future-proofed
”
against new or developing protocols because the Version 9 format can be
adapted to provide support for them.
The Version 9 export format consists of a packet header followed by one or more template flow or data flow
sets. A template flow set provides a description of the fields that will be present in future data flow sets. These
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
516
Information About NetFlow Lite