Cisco NetFlow 2960

Configuration to enable netflow on a cisco 2960-x layer 2 switch

flow record flows
match datalink mac source address input
match datalink mac destination address input
match ipv4 tos
match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
collect transport tcp flags
collect interface input
collect flow sampler
collect counter bytes long
collect counter packets long
collect timestamp sys-uptime first
collect timestamp sys-uptime last

flow exporter gigaflow-export-106
destination 10.210.252.106
source Vlan1
transport udp 2055
template data timeout 60
flow exporter gigaflow-export-105
destination 10.210.252.105
source Vlan1
transport udp 2055
template data timeout 60
flow monitor gigaflow-mon
record flows
exporter gigaflow-export-106
 exporter gigaflow-export-105
cache timeout active 60
statistics packet protocol


sampler random-sampler
mode random 1 out-of 32

int range 1/0/1 - 28

ip flow monitor gigaflow-mon sampler random-sampler input