Flow accounting settings 990 Buffer size u32 Buffer size in MiB 10 Specifies the maximum number of bytes to capture for each packet u32:128-750 Packet length in bytes 128 Enable egress flow accounting Disable in memory table plugin Syslog facility for flow-accounting auth authpriv cron daemon kern lpr mail mark news protocols security syslog user uucp local0 local1 local2 local3 local4 local5 local6 local7 all auth Authentication and authorization authpriv Non-system authorization cron Cron daemon daemon System daemons kern Kernel lpr Line printer spooler mail Mail subsystem mark Timestamp news USENET subsystem protocols Routing protocols (local7) security Authentication and authorization syslog Authentication and authorization user Application processes uucp UUCP subsystem local0 Local facility 0 local1 Local facility 1 local2 Local facility 2 local3 Local facility 3 local4 Local facility 4 local5 Local facility 5 local6 Local facility 6 local7 Local facility 7 all Authentication and authorization (auth|authpriv|cron|daemon|kern|lpr|mail|mark|news|protocols|security|syslog|user|uucp|local0|local1|local2|local3|local4|local5|local6|local7|all) #include NetFlow settings NetFlow engine-id 0-255 or 0-255:0-255 NetFlow engine-id for v5 u32 NetFlow engine-id for v9 / IPFIX (\d|[1-9]\d{1,8}|[1-3]\d{9}|4[01]\d{8}|42[0-8]\d{7}|429[0-3]\d{6}|4294[0-8]\d{5}|42949[0-5]\d{4}|429496[0-6]\d{3}|4294967[01]\d{2}|42949672[0-8]\d|429496729[0-5])$|^(\d|[1-9]\d|1\d{2}|2[0-4]\d|25[0-5]):(\d|[1-9]\d|1\d{2}|2[0-4]\d|25[0-5]) NetFlow maximum flows u32 NetFlow maximum flows NetFlow sampling-rate u32 Sampling rate (1 in N packets) #include NetFlow version to export 5 9 10 5 NetFlow version 5 9 NetFlow version 9 10 Internet Protocol Flow Information Export (IPFIX) 9 NetFlow destination server ipv4 IPv4 server to export NetFlow ipv6 IPv6 server to export NetFlow NetFlow port number u32:1025-65535 NetFlow port number 2055 NetFlow timeout values Expiry scan interval u32:0-2147483647 Expiry scan interval 60 Generic flow timeout value u32:0-2147483647 Generic flow timeout in seconds 3600 ICMP timeout value u32:0-2147483647 ICMP timeout in seconds 300 Max active timeout value u32:0-2147483647 Max active timeout in seconds 604800 TCP finish timeout value u32:0-2147483647 TCP FIN timeout in seconds 300 TCP generic timeout value u32:0-2147483647 TCP generic timeout in seconds 3600 TCP reset timeout value u32:0-2147483647 TCP RST timeout in seconds 120 UDP timeout value u32:0-2147483647 UDP timeout in seconds 300 sFlow settings sFlow agent IPv4 address auto ipv4 sFlow IPv4 agent address sFlow sampling-rate u32 Sampling rate (1 in N packets) sFlow destination server ipv4 IPv4 server to export sFlow ipv6 IPv6 server to export sFlow sFlow port number u32:1025-65535 sFlow port number 6343 #include #include