用户手册
配置Cisco 3850如下所示：
flow record NFA1
match ipv4 tos
match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match interface input
collect interface output
collect counter bytes long
collect counter packets long
collect timestamp absolute first
collect timestamp absolute last
flow record NFAout
match ipv4 tos
match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match interface output
collect interface input
collect counter bytes long
collect counter packets long
collect timestamp absolute first
collect timestamp absolute last
flow exporter NFA
destination {server ip address}
transport udp 9996
template data timeout 60
!
!
flow monitor NFA1
exporter NFA
cache timeout active 60
record NFA1
!
!
flow monitor NFAout
exporter NFA
cache timeout active 60
record NFAout
在设备的所有接口中应用以下命令：
ip flow monitor NFA1 input
ip flow monitor NFAout output
例如：
interface GigabitEthernet1/1/1
ip flow monitor NFA1 input
ip flow monitor NFAout output