Configuring Clickstream, Meta data, DNS export in IPFIX [Документация VAS Experts]

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
en:dpi:dpi_options:opt_li:li_ipfix [2025/07/18 12:43] elena.krasnobryzhen:dpi:dpi_options:opt_li:li_ipfix [2025/07/24 13:08] (current) – [Configuring the export of DNS responses or DNS queries] elena.krasnobryzh
Line 271: Line 271:
 Aggregating ''raw_data'', ''clickstream'', ''http_reply'' and ''ssl_reply'' with session data requires additional processing or executing a database query with the ''session_id'' key, or support in the ''rcollector'' utility. Aggregating ''raw_data'', ''clickstream'', ''http_reply'' and ''ssl_reply'' with session data requires additional processing or executing a database query with the ''session_id'' key, or support in the ''rcollector'' utility.
  
-=====DNS=====+=====Configuring the export of DNS responses or DNS queries=====
 DNS export is configured with the following settings: DNS export is configured with the following settings:
 <code bash> <code bash>
Line 313: Line 313:
  
 An alternative is to save the data in a local text log. Parameters: An alternative is to save the data in a local text log. Parameters:
-  * **''ajb_save_dns''** — flag for writing to a text file\\ **''ajb_save_dns=2''** allows you to enable sending DNS queries via IPFIX+  * **''ajb_save_dns''** — flag for writing to a text file 
 +    * **''ajb_save_dns=1''** — by default, sending DNS responses via IPFIX 
 +    * **''ajb_save_dns=2''** allows you to enable sending DNS queries via IPFIX
   * **''ajb_dns_ftimeout''** — timeout (minutes) for switching to the next file   * **''ajb_dns_ftimeout''** — timeout (minutes) for switching to the next file
   * **''ajb_dns_bufsize''** — file write buffer   * **''ajb_dns_bufsize''** — file write buffer
Line 321: Line 323:
 Switching to the next file occurs when the file size reaches ''ajb_dns_fsize'' or the file is not empty and ''ajb_dns_ftimeout'' has passed Switching to the next file occurs when the file size reaches ''ajb_dns_fsize'' or the file is not empty and ''ajb_dns_ftimeout'' has passed
  
-ajb_save_dns_format : format for writing to a text file+''ajb_save_dns_format'': format for writing to a text file
   * **''ts''** - time   * **''ts''** - time
   * **''ipsrc''** — ip source   * **''ipsrc''** — ip source