Mikrotik Netflow v9 Configuration

The following commands can be used to configure Mikrotik routers to send Netflow v9 data to a collector. First, turn on the Traffic Flow feature and specify an interface to monitor flows on.

/ip traffic-flow set enabled=yes interfaces=ether1

The example above tells the router to collect flow information for ether1, but could be easily extended with a comma-separated list of interfaces.

Next specify the flow collectors and ports to report flow data to.

/ip traffic-flow target add dst-address= port=9995 version=9

In this case we're using Netflow v9, on port 9995, with the flow collection server at Multiple targets (collectors) can be specified, using different Netflow versions and ports.

Decoding Netflow TCP Flags

What is Netflow?