Document toolboxDocument toolbox

netstat.netflow

Owned by Juan Tomás Alonso Nieto (Unlicensed)
Last updated: Feb 16, 2022
1 min read

Tags starting with netstat.netflow identify NetFlow event data.

Tag structure

There are two fixed tags depending on the version of NetFlow:

TagNetFlow versions supported
netstat.netflow.ltv1, v5, v6, v7
netstat.netflow.v9v9

For more information, read more about Devo tags.

Sending to Devo

NetFlow traffic should be forwarded to the dedicated, preconfigured NetFlow port 12999 on a Devo Relay for v7 and earlier. For v9 and later, Netflow traffic should be forwarded to the dedicated, preconfigured NetFlow port 12998 but it also needs an additional decoder installed (please contact Devo for this). All events received on these ports are tagged accordingly and forwarded securely to the Devo Cloud.