Netflow for specific traffic

3 replies
3821 views

Hello team,

i have a question about Netflow.

Netflow is clear to me that it can be enabled on a network interface to track traffic either in RX or TX or both. I wanted to know if it is possible to enable netflow only for a certain type of traffic and not for all traffic to pass the interface where it is enabled.
I looked in the official documentation but could not find anything about it.

Thanks for the help
BR

saneeshpv_FTNTAnswer

Staff

@luca1994

Still, you cannot apply filters, but you can perform sampling with sflow.

You can read more about sampling in the below blog post.

https://blogs.manageengine.com/network/netflowanalyzer/2011/02/25/sampling-and-netflow-analyzer.html

saneeshpv_FTNT

Staff

@luca1994

As far as I know it is not possible filter specific traffic to send to NetFlow collector and even NetFlow doesn't support sampling. The only option to send the specific interface traffic to collector and from there you could filter required traffic for your analysis based on the available flows.

Netflow does not support sampling, but Sflow does.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-configure-sample-rate-for-Netflow/ta-p/190516