Forum Discussion
Hi Rodger,
We do support sFlow, as it is listed as a supported protocol with NetFlow, here: http://help.logicmonitor.com/monitoring-with-logicmonitor/notes-for-monitoring-specific-types-of-hosts/netflow-sflow/ . We support sFlow v5 with the flow sample data format set at enterprise=0 and format=1.
Since jFlow, from my understanding, is more of a Juniper tweak to NetFlow, I would suspect it would work as well. I would suggest starting with jFlow v5, if you want to give it a try. I was told last night that we do not support jFlow from one of my support colleagues. But, it turns out we do. If you configure jFlow using the following v5 method: http://kb.juniper.net/InfoCenter/index?page=content&id=KB16677, it should work. That is, we have other customers doing exactly this and pulling v5 jFlow data.
- Enable sampling on one or more interfaces and specify the direction:
-
user@host set interfaces ge-0/0/0 unit 0 family inet sampling inputrnuser@host set interfaces ge-0/0/0 unit 0 family inet sampling output
- Specify the sampling rate:
-
Caution: Activation of flow collection can have a significant impact on the performance of the SRX Series device. The smaller the sample rate, the bigger the impact. It is recommended to not use a sampling input rate of 1.
user@host set forwarding-options sampling input rate 100
-
Specify the UDP port number of the host that is collecting
cflowd
packets:user@host set forwarding-options sampling family inet output flow-server 10.10.10.1 port 2056
Specify the version format: 5, 8, or 500 (ASN 500): -
user@host set forwarding-options sampling family inet output flow-server 10.10.10.1 version 5
Thanks, -
Michael