1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
# NetFlow V5 Sample Configuration
# Represents HTTPS traffic from internal network to Google
flows:
- version: v5
# Optional header - if not specified, current time and defaults will be used
header:
unix_secs: 1735141200
unix_nsecs: 0
sys_up_time: 360000
flow_sequence: 1
engine_type: 0
engine_id: 0
sampling_interval: 0
flowsets:
- src_addr: "192.168.1.10"
dst_addr: "172.217.14.206" # Google IP
next_hop: "192.168.1.1"
input: 1
output: 2
d_pkts: 150
d_octets: 95000
first: 350000
last: 360000
src_port: 54321
dst_port: 443 # HTTPS
tcp_flags: 0x18 # ACK + PSH
protocol: 6 # TCP
tos: 0
src_as: 65001
dst_as: 15169 # Google ASN
src_mask: 24
dst_mask: 24
# Destination configuration
destination:
ip: "127.0.0.1"
port: 2055