| 23 | |
| 24 | Please note that all buttons and selection windows have a tip.[[BR]] |
| 25 | When renetcolGUI is launched, it's possible to have some warning. The first output is the following: |
| 26 | {{{ |
| 27 | #!c |
| 28 | --------------------------------------------------------------- |
| 29 | In this version 0.0.7, you can apply rules on the collector based on the following fields: |
| 30 | IN_BYTES: 1, |
| 31 | L4_SRC_PORT: 7, |
| 32 | IPV4_SRC_ADDR: 8, |
| 33 | INPUT_SNMP: 10, |
| 34 | L4_DST_PORT: 11, |
| 35 | IPV4_DST_ADDR: 12, |
| 36 | OUTPUT_SNMP: 14, |
| 37 | IPV4_NEXT_HOP: 15, |
| 38 | BGP_IPV4_NEXT_HOP: 18, |
| 39 | IPV6_SRC_ADDR: 27, |
| 40 | IPV6_DST_ADDR: 28, |
| 41 | MPLS_TOP_LABEL_TYPE: 46, |
| 42 | IPV6_NEXT_HOP: 62, |
| 43 | BPG_IPV6_NEXT_HOP: 63, |
| 44 | IP_PROTOCOL_VERSION: 60, please note that the IPv4 templates don't have this field |
| 45 | ROUTER_SRC_ADDR: 0, !!! it's not a real number for a field, but it's a great function |
| 46 | ---------------------------------------------------------------- |
| 47 | }}} |
| 48 | It's the list of fields which can be used for the selection of a flow.[[BR]] |
| 49 | In the window, the first action is to activate the flows reception with a click on the File/ReceiveStream button.[[BR]] |
| 50 | After, you can used the collecteor control button and entered a rule which be applied on the collector.[[BR]] |
| 51 | |
| 52 | To see all flows from a router, enter `0 = 10.0.0.1` where `10.0.0.1` is the loopback who is used by the router to send the NetFlow export to the collector.[[BR]] |
| 53 | To see all IPv6 flows which are on your network, enter `60 = 6` for field 60 (IP Protocol), value 6 (IPv6).[[BR]] |
| 54 | To see all flows from a IPv4 address, enter `8 = 192.168.0.1` and after validation, the second rules `12 = 192.168.0.1` (8 is IPV4_SRC_ADDR and 12 is IPV4_DST_ADDR).[[BR]] |
| 55 | |
| 56 | If too many flows are received by the GUI, you can freeze the screen with the FREEZE button. Note that during the freeze all flows received by the GUI are lost, except if you used the record option.[[BR]] |
| 57 | |
| 58 | |
| 59 | |