Compatible and Advanced flow forwarding
Differences between Compatible and Advanced flow forwarding.
Product: Flowmon Collector
|Steps to Reproduce:
This mode allows ﬂow forwarding using the UDP protocol with a spoofed IP address of the ﬂow source. This mode is compatible with all Flowmon Collectors and third-party Collectors. In compatible mode, the original IP address of ﬂow source is preserved (that is, IP spoof mode), so the target collector assigns the ﬂows to the IP address of the original ﬂow source. Keep this in mind when conﬁguring ﬁrewall rules, and so on.
This mode allows ﬂow forwarding using advanced capabilities such as TCP or TCP/TLS export, ﬂow protocol conversion, ﬂow sampling, and ﬂow ﬁltering.
In advanced mode, IP spoofing is not used, and IP addresses of the Probes are read from IPFIX field 130. In this mode, a forwarding Collector is also created as the source.
The IPv4 address used by the Exporting Process. This is used by the Collector to identify the Exporter in cases where the identity of the Exporter may have been obscured by the use of a proxy.
Was this article helpful?0 out of 0 found this helpful