Submit a ticketCall us

Don’t fall victim to a ransomware attack
Backups are helpful, but sometimes that’s not enough to protect your business against ransomware. At our live webcast we will discuss how to protect against ransomware attacks with SolarWinds® Patch Manager and how to leverage log data to detect ransomware. Register now for our live webcast.

Home > Success Center > Netflow Traffic Analyzer (NTA) > NTA - How to configure Juniper SRX devices to export J-Flow

NTA - How to configure Juniper SRX devices to export J-Flow

Table of contents
Created by Joseph Esquitin, last modified by MindTouch on Jun 23, 2016

Views: 782 Votes: 0 Revisions: 4

Overview

This article provides an example of configuring J-Flow on an SRX Series device. NOTE: SRX devices support J-Flow versions 5 and 8. SolarWinds Netflow only supports and will process J-Flow version 5.

Environment

  • All Netflow version

Steps

Configuration Example

The following procedure provides an example of J-Flow configuration.

  1. Enable sampling on one or more interfaces, and specify the direction:


user@host# set interfaces ge-0/0/0 unit 0 family inet sampling input
user@host# set interfaces ge-0/0/0 unit 0 family inet sampling output

  1. Specify the sampling rate.

Caution: Activation of flow collection can have a significant impact on the performance of the SRX Series device. The smaller the sample rate, the bigger the impact. We recommend that you do not use a sampling input rate of 1.

user@host# set forwarding-options sampling input rate 100    

  1. Specify the UDP port number of the host that is collecting cflowd packets.

user@host# set forwarding-options sampling family inet output flow-server 10.10.10.1 port 2055 

  1. Specify the version format: 5.
  2. user@host# set forwarding-options sampling family inet output flow-server 10.10.10.1 version 5  

 

Disclaimer: Please note, any content posted herein is provided as a suggestion or recommendation to you for your internal use. This is not part of the SolarWinds software or documentation that you purchased from SolarWinds, and the information set forth herein may come from third parties. Your organization should internally review and assess to what extent, if any, such custom scripts or recommendations will be incorporated into your environment.  You elect to use third party content at your own risk, and you will be solely responsible for the incorporation of the same, if any.

 

 

Last modified
20:38, 22 Jun 2016

Tags

Classifications

Public