Skip to content. Skip to navigation

Portal flowmon

Sections
Personal tools
You are here: Home FlowMon Probe Development Configuration Sample configuration
Document Actions

Sample configuration

by Ladislav Lhotka last modified 2008-02-04 14:16
Contributors: Ladislav Lhotka

This is a sample FlowMon probe configuration comforming to the version 3 of the schema.

<?xml version="1.0" encoding="utf-8"?>
<flowmon xmlns="http://flowmon.org/ns/flowmon/3.0">
  <systemInformation>
    <sysName>kopr</sysName>
    <sysContact>Joe Admin &lt;jadm at flowmon dot org&gt;</sysContact>
    <sysLocation>Praha, Czech Republic</sysLocation>
    <description>Backbone line Praha-Pardubice</description>
  </systemInformation>
  <global>
    <activeTimeout>30</activeTimeout>
    <inactiveTimeout>2</inactiveTimeout>
    <logging>
      <logDestination>
    <syslogHost content-type="name">cabernet.liberouter.org</syslogHost>
      </logDestination>
      <logLevel>emerg</logLevel>
    </logging>
    <sampleAndHoldRate>1000</sampleAndHoldRate>
  </global>
  <interfaces>
    <interface>
      <ifNumber>0</ifNumber>
      <inputSampling>
    <samplingMethod>statistical</samplingMethod>
    <samplingRate>100</samplingRate>
      </inputSampling>
    </interface>
    <interface>
      <ifNumber>1</ifNumber>
    </interface>
    <interface>
      <!-- enables mirroring from interface 1 -->
      <ifNumber>3</ifNumber>
      <disabled>false</disabled>
      <linkRate>100</linkRate>
    </interface>
  </interfaces>
  <collectors>
    <collector>
      <description>FTAS collector - NetFlow v5</description>
      <host content-type="name">bobik.cesnet.cz</host>
      <udpPort>6666</udpPort>
      <exportProtocol>netflow-v5</exportProtocol>
      <flowFilter>
    <filterCondition>
      <ifNumber>0</ifNumber>
      <addressRange>
        <startAddress content-type="ipv4">195.113.0.0</startAddress>
        <endAddress content-type="ipv4">195.113.255.255</endAddress>
      </addressRange>
    </filterCondition>
    <filterCondition>
      <ifNumber>0</ifNumber>
      <addressRange>
        <startAddress content-type="ipv4">147.251.0.0</startAddress>
        <endAddress content-type="ipv4">147.251.2.13</endAddress>
      </addressRange>
    </filterCondition>
      </flowFilter>
    </collector>
    <collector>
      <description>FTAS collector - NetFlow v9</description>
      <host content-type="name">bobik.cesnet.cz</host>
      <udpPort>7777</udpPort>
      <exportProtocol>netflow-v9</exportProtocol>
      <flowFilter>
    <!-- this filter receives all IPv6 flows -->
    <filterCondition>
      <ipVersion>6</ipVersion>
    </filterCondition>
      </flowFilter>
      <anonymisation>
    <encryptAES>
      <initialisation>clock</initialisation>
      <applyTo>
        <sourcePort/>
        <sourceIpAddress/>
      </applyTo>
    </encryptAES>
      </anonymisation>
    </collector>
    <collector>
      <description>Experimental NFSen collector - IPFIX</description>
      <host content-type="ipv4">192.168.1.47</host>
      <udpPort>6378</udpPort>
      <exportProtocol>ipfix</exportProtocol>
      <templateSendPeriod>300</templateSendPeriod>
      <anonymisation>
    <simpleRewrite>
      <maskPrefix>
        <IpAddress content-type="ipv4">172.29.0.0</IpAddress>
        <length>16</length>
      </maskPrefix>
      <applyTo>
        <destinationIpAddress/>
      </applyTo>
    </simpleRewrite>
      </anonymisation>
      <flowFilter>
    <filterCondition>
      <addressRange>
        <startAddress content-type="ipv4">195.112.4.27</startAddress>
        <endAddress content-type="ipv4">195.112.4.35</endAddress>
        <matchAgainst>
          <destinationIpAddress/>
        </matchAgainst>
      </addressRange>
    </filterCondition>
    <filterCondition>
      <addressRange>
        <startAddress content-type="ipv6">2001:718:1:3a72::</startAddress>
        <endAddress content-type="ipv6">2001:718:1:3a72:FFFF:FFFF:FFFF:FFFF</endAddress>
        <matchAgainst>
          <sourceIpAddress/>
        </matchAgainst>
      </addressRange>
    </filterCondition>
      </flowFilter>
    </collector>
  </collectors>
</flowmon>