Sample configuration
This is a sample FlowMon probe configuration comforming to the version 3 of the schema.
<?xml version="1.0" encoding="utf-8"?>
<flowmon xmlns="http://flowmon.org/ns/flowmon/3.0">
<systemInformation>
<sysName>kopr</sysName>
<sysContact>Joe Admin <jadm at flowmon dot org></sysContact>
<sysLocation>Praha, Czech Republic</sysLocation>
<description>Backbone line Praha-Pardubice</description>
</systemInformation>
<global>
<activeTimeout>30</activeTimeout>
<inactiveTimeout>2</inactiveTimeout>
<logging>
<logDestination>
<syslogHost content-type="name">cabernet.liberouter.org</syslogHost>
</logDestination>
<logLevel>emerg</logLevel>
</logging>
<sampleAndHoldRate>1000</sampleAndHoldRate>
</global>
<interfaces>
<interface>
<ifNumber>0</ifNumber>
<inputSampling>
<samplingMethod>statistical</samplingMethod>
<samplingRate>100</samplingRate>
</inputSampling>
</interface>
<interface>
<ifNumber>1</ifNumber>
</interface>
<interface>
<!-- enables mirroring from interface 1 -->
<ifNumber>3</ifNumber>
<disabled>false</disabled>
<linkRate>100</linkRate>
</interface>
</interfaces>
<collectors>
<collector>
<description>FTAS collector - NetFlow v5</description>
<host content-type="name">bobik.cesnet.cz</host>
<udpPort>6666</udpPort>
<exportProtocol>netflow-v5</exportProtocol>
<flowFilter>
<filterCondition>
<ifNumber>0</ifNumber>
<addressRange>
<startAddress content-type="ipv4">195.113.0.0</startAddress>
<endAddress content-type="ipv4">195.113.255.255</endAddress>
</addressRange>
</filterCondition>
<filterCondition>
<ifNumber>0</ifNumber>
<addressRange>
<startAddress content-type="ipv4">147.251.0.0</startAddress>
<endAddress content-type="ipv4">147.251.2.13</endAddress>
</addressRange>
</filterCondition>
</flowFilter>
</collector>
<collector>
<description>FTAS collector - NetFlow v9</description>
<host content-type="name">bobik.cesnet.cz</host>
<udpPort>7777</udpPort>
<exportProtocol>netflow-v9</exportProtocol>
<flowFilter>
<!-- this filter receives all IPv6 flows -->
<filterCondition>
<ipVersion>6</ipVersion>
</filterCondition>
</flowFilter>
<anonymisation>
<encryptAES>
<initialisation>clock</initialisation>
<applyTo>
<sourcePort/>
<sourceIpAddress/>
</applyTo>
</encryptAES>
</anonymisation>
</collector>
<collector>
<description>Experimental NFSen collector - IPFIX</description>
<host content-type="ipv4">192.168.1.47</host>
<udpPort>6378</udpPort>
<exportProtocol>ipfix</exportProtocol>
<templateSendPeriod>300</templateSendPeriod>
<anonymisation>
<simpleRewrite>
<maskPrefix>
<IpAddress content-type="ipv4">172.29.0.0</IpAddress>
<length>16</length>
</maskPrefix>
<applyTo>
<destinationIpAddress/>
</applyTo>
</simpleRewrite>
</anonymisation>
<flowFilter>
<filterCondition>
<addressRange>
<startAddress content-type="ipv4">195.112.4.27</startAddress>
<endAddress content-type="ipv4">195.112.4.35</endAddress>
<matchAgainst>
<destinationIpAddress/>
</matchAgainst>
</addressRange>
</filterCondition>
<filterCondition>
<addressRange>
<startAddress content-type="ipv6">2001:718:1:3a72::</startAddress>
<endAddress content-type="ipv6">2001:718:1:3a72:FFFF:FFFF:FFFF:FFFF</endAddress>
<matchAgainst>
<sourceIpAddress/>
</matchAgainst>
</addressRange>
</filterCondition>
</flowFilter>
</collector>
</collectors>
</flowmon>
Version for COMBO6
JRA2 Toolset