| Table of Contents |
|---|
Introduction
MikroTik Traffic-Flow is a system that provides statistical information about packets that pass through the router. Besides network monitoring and accounting, system administrators can identify various problems that may occur in the network. With help of Traffic-Flow, it is possible to analyze and optimize the overall network performance. As Traffic-Flow is compatible with Cisco NetFlow, it can be used with various utilities which are designed for Cisco's NetFlow.
...
- version 1 - the first version of NetFlow data format, do not use it unless you have to
- version 5 - in addition to version 1, version 5 has a possibility to include BGP AS and flow sequence number information. Currently, RouterOS does not include BGP AS numbers.
- version 9 - a new format which can be extended with new fields and record types thank's to its template-style design
General
...
| language | ros |
|---|
Sub-menu: /ip
...
traffic-flow
This section lists the configuration properties of Traffic-Flow.
...
2222 packet consecutive packets will be sampled and then 1111 will be omitted. Then the sampling cycle repeats in such a manner.
Targets
...
| language | ros |
|---|
Sub-menu: /ip
...
traffic-flow
...
target
With Traffic-Flow targets we specify those hosts which will gather the Traffic-Flow information from the router.
| Property | Description |
|---|---|
| address (IP:port; Default: ) | IP address and port (UDP) of the host which receives Traffic-Flow statistic packets from the router. |
| v9-template-refresh (integer; Default: 20) | Number of packets after which the template is sent to the receiving host (only for NetFlow version 9) |
| v9-template-timeout (time; Default: ) | After how long to send the template, if it has not been sent. |
| version (1 | 5 | 9; Default: ) | Which version format of NetFlow to use |
Notes
By looking at the packet flow diagram you can see that traffic flow is at the end of the input, forward, and output chain stack. It means that traffic flow will count only traffic that reaches one of those chains.
...
Other interfaces will appear in the report if traffic is passing through them and the monitoring interface.
Examples
This example shows how to configure Traffic-Flow on a router
...
| Info | ||
|---|---|---|
| ||
To use ntop-ng with MikroTik you need to use Nprobe, which is paid software. |
See more
...