We have setup the netflow on our core switch to  export information  to our Netflow server Manage Engine. I would like to know/monitor all the VoIP traffic both direction that has been marked properly, in our case with DSCP value EF.

I have configured the following on our Core switch Cisco VS-C6504E-SUP2T:

flow record MBSL-FLOW

match ipv4 source address

match ipv4 destination address

collect counter bytes

collect counter packets

match transport tcp flags

match transport destination-port

match transport source-port

match ipv4 destination address

match ipv4 source address

match ipv4 protocol

match ipv4 tos

match ipv4 dscp

match ipv4 precedence

match interface input

I am looking for the  more granular results like below.

 

Date flow start          Duration Proto      Src IP Addr:Port          Dst IP Addr:Port   Flags Tos  Packets    Bytes      pps      bps    Bpp Flows

2014-04-14 13:03:04.632  1684.860 UDP          10.2.8.85:32514 ->       10.1.8.103:32514 .A.... 184    44129    2.7 M       26    12770     60     6

2014-04-14 12:57:10.608  3277.232 UDP         10.1.8.178:32514 ->        10.2.8.48:32514 .A....  184     42774    2.6 M       13     6295     60     7

2014-04-14 13:03:04.484  1684.944 UDP         10.1.8.103:32514 ->        10.2.8.85:32514 .A....  184     32916    2.0 M       19     9342     59     6

2014-04-14 12:57:10.788  3277.068 UDP          10.2.8.48:32514 ->       10.1.8.178:32514 .A.... 184    29857    1.8 M        9     4381     60     7

2014-04-14 09:17:11.620  6166.588 UDP          10.2.9.21:32514 ->       10.1.8.103:32514 .A....   0    27050    1.7 M        4     2158     61    10

2014-04-14 09:17:11.784  6166.428 UDP         10.1.8.103:32514 ->        10.2.9.21:32514 .A....  184     25640    1.5 M        4     1967     59     6

2014-04-14 11:31:06.900   746.872 UDP         10.1.8.178:32514 ->       10.2.8.146:32514 .A....  184     21041    1.3 M       28    13525     60     3

2014-04-14 09:13:17.264   773.812 UDP          10.1.8.75:32514 ->         10.2.9.1:32514 .A....  184     19779    1.2 M       25    12729     62     3

2014-04-14 11:31:06.744   747.028 UDP         10.2.8.146:32514 ->       10.1.8.178:32514 .A.... 184    19026    1.2 M       25    12503     61     3

2014-04-14 09:13:15.072   776.004 UDP           10.2.9.1:32514 ->        10.1.8.75:32514 .A.... 160    19892    1.1 M       25    11633     56     3

Any information and help would be much  appreciated.

Any  information and help would be much appreciated.

Thanks

Regards

John