|
|
|
If your CNA system includes the optional Endpoint Flow Collection module (EFC), you can obtain probe target addresses automatically, from a NetFlow, SFlow, or SPAN data stream sent to the CNA system from a router or switch.
NOTE: The functionality and commands in this chapter are displayed using NetFlow; however, the functionality and commands are applicable to NetFlow and SFlow.
Use access lists to filter traffic so that data flows of interest can be isolated and diverted to an active-measurement group.
Different lists can be established to isolate different types of traffic, which can be diverted to different groups. CLI commands allow you to further refine which addresses in the flows are to be used as probe targets.
|
|
|