I am somehow able to analyze netflow packet using my own netflow collector (build in python). It works for certain ip and CIDR(Classless Inter Domain routing), definitely not overlapping. What is the best way to support VRF(Virtual Routing and Forwarding) in netflow? I guess there is no any metadata in netflow packet for distinguishing either its VRF or not.
Asked
Active
Viewed 542 times
4
-
VRF aware Netflow is available in IOS starting with 12.4(11)T. What's your IOS version? – favoretti Sep 12 '12 at 18:03
-
You can add vrf input name collection by adding `collect routing vrf input` to your flow-record. Not sure on top of my head how it will arrive in a packed, but I suppose some sort of `tcpdump` can help determining that. – favoretti Sep 12 '12 at 18:09