System information

Manual:IP/Traffic Flow

Note: Starting 6.0rc14 release setting interface will show RX and TX for the interface. Previously traffic-flow

reported only RX fraffic for the interface and to see bidirecional data it was required to set up more interfaces.

Targets

Sub-menu: /ip traffic-flow target

With Traffic-Flow targets we specify those hosts which will gather the Traffic-Flow information from router.

Property Description

address (IP:port; Default: ) IP address and port (UDP) of the host which receives Traffic-Flow statistic packets from the

router.

v9-template-refresh (integer; Default:

20)

Number of packets after which the template is sent to the receiving host (only for NetFlow

version 9)

v9-template-timeout (time; Default: ) After how long to send the template, if it has not been sent.

version (1 | 5 | 9; Default: ) Which version format of NetFlow to use

Notes

By looking at packet flow diagram you can see that traffic flow is at the end of input, forward and output chain stack.

It means that traffic flow will count only traffic that reaches one of those chains.

For example, you set up mirror port on switch, connect mirror port to router and set traffic flow to count mirrored

packets. Unfortunately such setup will not work, because mirrored packets are dropped before they reach input

chain.

Other interfaces will appear in report if traffic is passing thorugh them and monitored interface.

Examples

This example shows how to configure Traffic-Flow on a router

Enable Traffic-Flow on the router:

[admin@MikroTik] ip traffic-flow> set enabled=yes

[admin@MikroTik] ip traffic-flow> print

enabled: yes

interfaces: all

cache-entries: 1k

active-flow-timeout: 30m

inactive-flow-timeout: 15s

[admin@MikroTik] ip traffic-flow>

Specify IP address and port of the host, which will receive Traffic-Flow packets:

[admin@MikroTik] ip traffic-flow target> add address=192.168.0.2:2055 \

\... version=9

[admin@MikroTik] ip traffic-flow target> print

Flags: X - disabled

# ADDRESS VERSION

0 192.168.0.2:2055 9

[admin@MikroTik] ip traffic-flow target>