Manual

[phone] www.qtech.ru
Москва, Новозаводская ул., 18, стр. 1
336
Chapter 38 sFlow Configuration
38.1 Introduction to sFlow
The sFlow (RFC 3176) is a protocol based on standard network export and used on monitoring
the network traffic information developed by the InMon Company. The monitored switch or
router sends date to the client analyzer through its main operations such as sampling and
statistic, then the analyzer will analyze according to the user requirements so to monitor the
network.
A sFlow monitor system includes: sFlow proxy, central data collector and sFlow analyzer. The
sFlow proxy collects data from the switch using sampling technology. The sFlow collector is for
formatting the sample data statistic which is to be forwarded to the sFlow analyzer which will
analyze the sample data and perform corresponding measure according to the result. Our
switch here acts as the proxy and central data collector in the sFlow system.
We have achieved data sampling and statistic targeting physical port.
Our data sample includes the IPv4 and IPv6 packets. Extensions of other types are not
supported so far. As for non IPv4 and IPv6 packet, the unify HEADER mode will be adopted
following the requirements in RFC3176, copying the head information of the packet based on
analyzing the type of its protocol.
The latest sFlow protocol presented by InMon Company is the version 5. Since it is the version
4 which is realized in the RFC3176, version conflict might exist in some case such as the
structure and the packet format. This is because the version 5 has not become the official
protocol, so, in order to be compatible with current applications, we will continue to follow the
RFC3176.
38.2 sFlow Configuration Task List
1. Configure sFlow Collector address
Command
Explanation
Global mode and Port Mode
sflow destination <collector-address>
[<collector-port>]
no sflow destination
Configure the IP address and port number of
the host in which the sFlow analysis software
is installed. As for the ports, if IP address is
configured on the port, the port configuration
will be applied, or else will be applied the
global configuration. The “no sflow
destination” command restores to the default
port value and deletes the IP address.