283 posts

Enable Netflow on Palo Alto

Reading Time: 2 minutes All Palo Alto Networks firewalls support NetFlow (Version 9) except the PA-4000 Series and PA-7000 Series firewalls. The firewalls support only unidirectional NetFlow, not bidirectional. The firewalls perform NetFlow processing on all IP packets on the interfaces and do not support sampled NetFlow. You can export NetFlow records for Layer 3, Layer 2, virtual wire, […]

Configuration Considerations

Reading Time: 2 minutes The sampling rate is a fraction in the form 1/N, meaning that, on average, one out of every N packets will be sampled. The sFlow sample command at the global level or port level specifies N, the denominator of the fraction. Thus a higher number for the denominator means a lower sampling rate since fewer […]

Changing the Polling Interval

Reading Time: 2 minutes The polling interval defines how often sFlow byte and packet counter data for a port are sent to the sFlow collector(s). If multiple ports are enabled for sFlow, the switch device staggers transmission of the counter data to smooth performance. For example, if sFlow is enabled on two ports and the polling interval is 20 […]

Changing the Sampling Rate

Reading Time: < 1 minute The sampling rate is the average ratio of the number of packets incoming on an sFlow-enabled port, to the number of flow samples taken from those packets. You can change the default (global) sampling rate. You also can change the rate on an individual port, overriding the default sampling rate of 512. With a sampling […]

Enable sFlow on Brocade

Reading Time: < 1 minute The following configuration enables sFlow monitoring of all interfaces on a Brocade FGS switch (24 ports), sampling packets at 1-in-10, polling counters every 20 seconds and sending the sFlow to an analyzer ( on UDP port 6343 (the default sFlow port): fgs(config)# int e 0/1/1 to 0/1/24 fgs(config-mif-0/1/1-0/1/24)# sflow forwarding fgs(config-mif-0/1/1-0/1/24)# exit fgs(config)# sflow destination […]