Configure the UDP Input

QUESTION

How can the flow collector’s flow port be changed?

ANSWER

The ElastiFlow Unified Flow Collector receives packets containing flow records using UDP. There are three configurable parameters:

ParameterDescription

EF_FLOW_SERVER_UDP_PORT

The UDP port which the flow collector listens to for Netflow/IPFIX/sFLOW packets

EF_FLOW_SERVER_UDP_IP

The IP address the UDP socket is bound to on the flow collector

EF_FLOW_SERVER_UDP_READ_BUFFER_MAX_SIZE

The UDP receive buffer for the system. If this value exceeds the maximum allowed buffer size (net.core.rmem_max on Linux), the maximum allowed size is used.

Refer to the Configuration Reference for additional details.

REFERENCE

  • Netflow/IPFIX/sFlow (UDP) Input