IPFIXCol2 - NetFlow v5/v9 and IPFIX flow collector and balancer [Документация VAS Experts]

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
en:dpi:dpi_components:utilities:ipfixcol2 [2023/08/28 15:11] – ↷ Операцией перемещения обновлены ссылки elena.krasnobryzhen:dpi:dpi_components:utilities:ipfixcol2 [2024/10/18 12:49] (current) elena.krasnobryzh
Line 1: Line 1:
-====== IPFIXCol2 ====== +====== IPFIXCol2 - NetFlow v5/v9 and IPFIX flow collector and balancer ====== 
-{{indexmenu_n>7}}+{{indexmenu_n>3}}
 ===== Introduction ===== ===== Introduction =====
 [[https://github.com/CESNET/ipfixcol2|IPFIXCol2]] — is a flexible, high-performance NetFlow v5/v9 and IPFIX streaming data collector, extensible with plugins. The version of the application presented in the VAS Experts repository includes the changes needed to work optimally with IPFIX streams from the Stingray Service Gateway. [[https://github.com/CESNET/ipfixcol2|IPFIXCol2]] — is a flexible, high-performance NetFlow v5/v9 and IPFIX streaming data collector, extensible with plugins. The version of the application presented in the VAS Experts repository includes the changes needed to work optimally with IPFIX streams from the Stingray Service Gateway.
  
 ===== Installation ===== ===== Installation =====
-  - Connect the VAS Experts repository as in step 1 of the [[en:dpi:update:dpi_update_10:dpi_10_update:start|DPI installation instructions]]+  - Connect the VAS Experts repository <code bash>rpm --import http://vasexperts.ru/centos/RPM-GPG-KEY-vasexperts.ru 
 +rpm -Uvh http://vasexperts.ru/centos/6/x86_64/vasexperts-repo-1-0.noarch.rpm</code>
   - Install ipfixcol2: dnf install -y ipfixcol2   - Install ipfixcol2: dnf install -y ipfixcol2
  
 ===== Setup files ===== ===== Setup files =====
 Configuration file: Configuration file:
-<code>+<code bash>
 /opt/vasexperts/etc/ipfixcol2/startup.xml /opt/vasexperts/etc/ipfixcol2/startup.xml
 </code> </code>
  
 Executable file: Executable file:
-<code>+<code bash>
 /opt/vasexperts/bin/ipfixcol2 /opt/vasexperts/bin/ipfixcol2
 </code> </code>
  
 Plugins: Plugins:
-<code>+<code bash>
 /opt/vasexperts/lib64/ipfixcol2/libanonymization-intermediate.so /opt/vasexperts/lib64/ipfixcol2/libanonymization-intermediate.so
 /opt/vasexperts/lib64/ipfixcol2/libfds-output.so /opt/vasexperts/lib64/ipfixcol2/libfds-output.so
Line 38: Line 39:
  
 Service file to run the application: Service file to run the application:
-<code>+<code bash>
 /usr/lib/systemd/system/ipfixcol2.service /usr/lib/systemd/system/ipfixcol2.service
 </code> </code>
Line 44: Line 45:
 ===== Launch parameters ===== ===== Launch parameters =====
 The program has the following launch parameters: The program has the following launch parameters:
-<code>+<code bash>
 Usage: ipfixcol2 [-c FILE] [-p PATH] [-e DIR] [-P FILE] [-r SIZE] [-vVhLd] Usage: ipfixcol2 [-c FILE] [-p PATH] [-e DIR] [-P FILE] [-r SIZE] [-vVhLd]
  
Line 73: Line 74:
  
 ===== Application configuration for IPFIX stream replication ===== ===== Application configuration for IPFIX stream replication =====
-The configuration file (/opt/vasexperts/etc/ipfixcol2/startup.xml)shows an example of how to configure one IPFIX stream replication over TCP to two collectors in round robin mode. The configuration file is in xml format.+The configuration file ''/opt/vasexperts/etc/ipfixcol2/startup.xml'' shows an example of how to configure one IPFIX stream replication over TCP to two collectors in round robin mode. The configuration file is in xml format.
  
-<code>+<code bash>
 <ipfixcol2> <ipfixcol2>
   <!-- Input plugins -->   <!-- Input plugins -->
Line 118: Line 119:
 </code> </code>
  
-The interface and the port for receiving IPFIX stream are configured in the <inputPlugins> block. The TCP plugin (<plugin> tcp) is used to receive IPFIX stream via TCP. In the <params> block the plugin's parameters are set. The <locapPort> block of the tcp plugin contains the port number to receive the IPFIX stream. The <localIPAddress> block contains IP address of the interface to receive TCP stream.+The interface and the port for receiving IPFIX stream are configured in the ''<inputPlugins>'' block. The ''TCP'' plugin (''<plugin> tcp'') is used to receive IPFIX stream via TCP. In the ''<params>'' block the plugin's parameters are set. The ''<locapPort>'' block of the ''tcp'' plugin contains the port number to receive the IPFIX stream. The ''<localIPAddress>'' block contains IP address of the interface to receive TCP stream.
  
-IPFIX input stream replication is configured in the <outputPlugins> block. For replication forwarder plugin (<plugin> forwarder) is used. In the <params> block the plugin's parameters are set. In block <protocol> indicate the IP protocol (TCP or UDP). The <mode> block specifies the mode of the input IPFIX stream distribution to the specified collectors (may be roundrobin or all). Block <hosts> specifies collectors for replication of input IPFIX stream. Each collector is described by a separate <host> block. In this block the collector name (<name> block), IP address (<address> block) and port (<port> block) are specified.+IPFIX input stream replication is configured in the ''<outputPlugins>'' block. For replication ''forwarder'' plugin (''<plugin> forwarder'') is used. In the ''<params>'' block the plugin's parameters are set. In block ''<protocol>'' indicate the IP protocol (''TCP'' or ''UDP''). The ''<mode>'' block specifies the mode of the input IPFIX stream distribution to the specified collectors (may be ''roundrobin'' or ''all''). Block ''<hosts>'' specifies collectors for replication of input IPFIX stream. Each collector is described by a separate ''<host>'' block. In this block the collector name (''<name>'' block), IP address (''<address>'' block) and port (''<port>'' block) are specified.
  
  
 <note important>**Attention!**\\ <note important>**Attention!**\\
-You must pay attention to the value of the <mode> block. To replicate the input stream to **all** collectors you must specify **all**.</note>+You must pay attention to the value of the ''<mode>'' block. To replicate the input stream to **all** collectors you must specify ''all''.</note>
  
 ===== Application launch ===== ===== Application launch =====
 To launch the application, use the command: To launch the application, use the command:
-<code>+<code bash>
 systemctl start ipfixcol2 systemctl start ipfixcol2
 </code> </code>
  
 To launch the application automatically at server startup, run the following command: To launch the application automatically at server startup, run the following command:
-<code>+<code bash>
 systemctl enable ipfixcol2 systemctl enable ipfixcol2
 </code> </code>
  
 ===== Logging ===== ===== Logging =====
-The application outputs messages to the syslog. By default, only error messages are logged.+The application outputs messages to the ''syslog''. By default, only error messages are logged.