set forwarding-options sampling input rate 1000 set forwarding-options sampling family inet output cflowd 192.168.1.100 port 2055 version 5

: 30-day retention, detect botnet C2, per-department billing.

: A server that receives, aggregates, and stores these flow records for long-term analysis.

📈 By tracking long-term traffic trends, administrators can make data-informed decisions about when and where to upgrade network infrastructure. Popular NetFlow Tools (PDF) More Netflow Tools for Performance and Security.

ip flow-cache timeout active 1 # Export every 1 min (active flows) ip flow-cache timeout inactive 15 # Export after 15 sec idle ip flow-cache timeout fast 30 # For TCP FIN/RST