en:dpi:dpi_options:opt_cgnat:cgnat_log:cgnat_log_ipfix [Документация VAS Experts]

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
en:dpi:dpi_options:opt_cgnat:cgnat_log:cgnat_log_ipfix [2022/03/09 11:47] edrudichgmailcomen:dpi:dpi_options:opt_cgnat:cgnat_log:cgnat_log_ipfix [2023/06/22 11:14] (current) – removed elena.krasnobryzh
Line 1: Line 1:
-====== 2 Export NAT flows in IPFIX (Netflow 10) ====== 
-{{indexmenu_n>2}} 
-For data analisys on NAT flows on external systems IPFIX export is available (aka netflow v10). 
- 
-Settings of NAT flows export: 
-<code ini> 
-ipfix_dev=em1 
-ipfix_nat_udp_collectors=1.2.3.4:1500,1.2.3.5:1501 
-ipfix_nat_tcp_collectors=1.2.3.6:9418 
-</code> 
-here 
-  * **em1** - network device name for export 
-  * **ipfix_nat_udp_collectors** - addresses of udp collectors 
-  * **ipfix_nat_tcp_collectors** - addresses of tcp collectors 
- 
-IPFIX template for NAT flows export  
- 
-^ID ^IANA ^Size ^Type ^ Description^ Note ^ 
-|323    |0    |8              |int64      | SYSTEM TIME WHEN THE EVENT OCCURRED|  
-|4      |0    |1              |int8       | PROTOCOLIDENTIFIER |  
-|230    |0    |1              |int8       | TYPE OF EVENT |  
-|8      |0    |4              |IP v4      | SOURCEIPV4ADDRESS |  
-|225    |0    |4              |IP v4      | POSTNATSOURCEIPV4ADDRESS |  
-|7      |0    |2              |int16      | SOURCE PORT |  
-|227    |0    |2              |int16      | POSTNAPTSOURCETRANSPORTPORT | 
-|12     |0    |4              |IP v4      | DESTINATIONIPV4ADDRESS |  
-|11     |0    |2              |int16      | DESTINATIONTRANSPORTPORT |  
-|2000   |43823|8              |int64      | SESSION_ID | 
-|2003   |43823|               |string     | LOGIN | 
- 
-To collect information in IPFIX any universal collector can be used or [[en:dpi:dpi_components:utilities:ipfixreceiver|IPFIX Receiver]] utility.