Differences
This shows you the differences between two versions of the page.
| en:cgnat_log_ipfix [2017/03/09 19:06] – created aalekseenko | en:cgnat_log_ipfix [2019/02/13 17:15] (current) – removed lexx26 | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| - | For data analisys on NAT flows on external systems IPFIX export is available (aka netflow v10). | ||
| - | |||
| - | Settings of NAT flows export: | ||
| - | < | ||
| - | ipfix_dev=em1 | ||
| - | ipfix_nat_udp_collectors=1.2.3.4: | ||
| - | ipfix_nat_tcp_collectors=1.2.3.6: | ||
| - | </ | ||
| - | here em1 network device name for export\\ | ||
| - | ipfix_nat_udp_collectors addresses of udp collectors\\ | ||
| - | ipfix_nat_tcp_collectors addresses of tcp collectors | ||
| - | |||
| - | IPFIX template for NAT flows export | ||
| - | |||
| - | ^ID ^IANA ^Size ^Type ^ Description^ | ||
| - | |323 |0 |8 |int64 | ||
| - | |4 |0 |1 |int8 | protocolIdentifier | | ||
| - | |230 |0 |1 |int8 | Type of Event | | ||
| - | |8 |0 |4 |IP v4 | sourceIPv4Address | | ||
| - | |225 |0 |4 |IP v4 | postNATSourceIPv4Address | | ||
| - | |7 |0 |2 |int16 | ||
| - | |227 |0 |2 |int16 | ||
| - | |12 | ||
| - | |11 | ||
| - | |2000 | ||
| - | |2003 | ||
| - | |||
| - | to collect information in IPFIX can be used any universal collector, for instance - [[https:// | ||
| - | utility [[ipfixreceiver|IPFIX Receiver]] | ||