Categories


Authors

Mikrotik Netflow Configuration

The following commands can be used to configure Mikrotik routers to send flow records to a collector. First, turn on the Traffic Flow feature and specify an interface to monitor flows on.

/ip traffic-flow set enabled=yes interfaces=ether1

The example above tells the router to collect flow information for ether1, but could be easily extended with a comma-separated list of interfaces.

Next specify the flow collectors and ports to report flow data to.

/ip traffic-flow target add dst-address=192.168.90.195 port=2055 version=5

In this case we're using Netflow v5, on port 2055, with the flow collection server at 192.168.90.195. Multiple targets (collectors) can be specified, using different Netflow versions and ports.

Ubiquiti IPFIX Configuration

Establishing a Baseline