Vendor & protocol setup · 6 min read

Enable NetFlow export on a Cisco router

Export NetFlow v9 from a Cisco router so Linivo can build traffic analysis and lateral-movement detection from real flow data.

What you'll need

Configure access on the router
A Linivo sensor reachable over UDP/2055

1

Enable flow export

Configure the flow exporter to point at the sensor's IP on the default NetFlow port.

ip flow-export destination 10.20.0.50 2055
ip flow-export version 9

2

Enable it on each interface

NetFlow only exports traffic for interfaces where it's explicitly turned on, both ingress and egress.

interface GigabitEthernet0/1
 ip flow ingress
 ip flow egress

3

Confirm flows are arriving

In Linivo, check Devices > (this router) > Flow status for a recent "last flow received" timestamp, usually within a minute of enabling export.

Send syslog to Linivo over TLS