Categories

Archive Block
The page connected to this block was deleted. Double-click here to select a different page, or check the recycle bin for the deleted page. Learn more


Authors

Archive Block
The page connected to this block was deleted. Double-click here to select a different page, or check the recycle bin for the deleted page. Learn more

Mikrotik Netflow v9 Configuration

The following commands can be used to configure Mikrotik routers to send Netflow v9 data to a collector. First, turn on the Traffic Flow feature and specify an interface to monitor flows on.

/ip traffic-flow set enabled=yes interfaces=ether1

The example above tells the router to collect flow information for ether1, but could be easily extended with a comma-separated list of interfaces.

Next specify the flow collectors and ports to report flow data to.

/ip traffic-flow target add dst-address=192.168.90.195 port=9995 version=9

In this case we're using Netflow v9, on port 9995, with the flow collection server at 192.168.90.195. Multiple targets (collectors) can be specified, using different Netflow versions and ports.

Decoding Netflow TCP Flags

What is Netflow?