Introduction to NFSIM
From IPFlow Netflow Collector
The Netflow Simulator (NFSIM) reads packets from an Ethernet device configured in promiscuous mode, builds a Netflow cache (like a router) and then send flows to one or many collectors for analysis.
Typically, this feature is used in conjunction with Cisco Catalyst SPAN or RSPAN capabilities.
[edit]
Supported Netflow versions for export
NFSIM is able to send Netflow packets with the following versions:
- Version 1 ;
- Version 5 ;
- Version 9, with IPv6 and aggregation schemes support
Netflow v8 is not supported in this version of NFSIM.
It is possible to configure multiple export destinations (without any limit), with different Netflow versions.
The Netflow v9 templates can be freely defined. Fields exportable with Netflow v9 are listed here.
[edit]
Netflow Caches support
The Netflow simulator is able to maintain up to three main Netflow caches:
- IPv4 Cache ;
- IPv6 Cache ;
- Ethernet cache, for Layer-2 accounting.
[edit]
