Figure: Cflowd configuration and implementation flow shows the process to configure cflowd parameters.
Figure: Cflowd configuration and implementation flow
There are three modes in which cflowd can be enabled to sample traffic on an interface:
Cflowd interface, where all traffic entering a specified port is subjected to sampling at the configured sampling rate.
Cflowd interface plus the definition of IP filters that specify an action of interface-disable-sample, where traffic that matches these filter entries is not subject to cflowd sampling.
Cflowd ACL, where IP filters must be created with entries containing the action filter-sampled. In this mode, only traffic matching these filter entries is subject to the cflowd sampling process.