Configuring Clickstream, Meta data, DNS export in IPFIX [Документация VAS Experts]
Документация VAS Experts Документация VAS Experts-mobile
in

Settings

  • Show page
  • Old revisions
  • Export to PDF
  • Fold/unfold all
  • Backlinks
  • Show page
  • Old revisions
  • Export to PDF
  • Fold/unfold all
  • Backlinks

    • Differences

    This shows you the differences between two versions of the page.

    Link to this comparison view

    Both sides previous revisionPrevious revision
    Next revision    		Previous revision
    en:dpi:dpi_options:opt_li:li_ipfix [2025/07/18 12:43] – elena.krasnobryzhen:dpi:dpi_options:opt_li:li_ipfix [2025/10/01 07:03] (current) – [ClickStream export Setup] elena.krasnobryzh
    Line 46: Line 46:
       * **''dbg_log_mask=0x80''** — logging statistics about export.   * **''dbg_log_mask=0x80''** — logging statistics about export.
      
     +The ''ipfix_mtu_limit'' parameter sets the maximum UDP packet size when sending IPFIX. By default, it equals the minimum MTU of the interfaces used for sending.
     ==== IPFIX format template for Clickstream ==== ==== IPFIX format template for Clickstream ====
      
    Line 271: Line 272:
     Aggregating ''raw_data'', ''clickstream'', ''http_reply'' and ''ssl_reply'' with session data requires additional processing or executing a database query with the ''session_id'' key, or support in the ''rcollector'' utility. Aggregating ''raw_data'', ''clickstream'', ''http_reply'' and ''ssl_reply'' with session data requires additional processing or executing a database query with the ''session_id'' key, or support in the ''rcollector'' utility.
      
    -=====DNS=====+=====Configuring the export of DNS responses or DNS queries=====
     DNS export is configured with the following settings: DNS export is configured with the following settings:
     <code bash> <code bash>
    Line 311: Line 312:
     |  2017                              |  -                |  raw          |  43823  | MPLS Labels                                                                                                                                                                                          || |  2017                              |  -                |  raw          |  43823  | MPLS Labels                                                                                                                                                                                          ||
     |  2016                              |  2                |  int16        |  43823  | BRIDGE_CHANNEL_NUM       | Channel (vchannel) or bridge number. If vchannel is set in the DPI configuration, the channel number will be transmitted, otherwise the bridge number will be transmitted  | |  2016                              |  2                |  int16        |  43823  | BRIDGE_CHANNEL_NUM       | Channel (vchannel) or bridge number. If vchannel is set in the DPI configuration, the channel number will be transmitted, otherwise the bridge number will be transmitted  |
     +|  224                               |  8                |  uint64       |  -      | ipTotalLength            | Total IP packet size                                                                                                                                                       |
     +|  3206                              |  2                |  uint16       |  43823  | DNS transaction id       | DNS Transaction ID                                                                                                                                                         |
      
     An alternative is to save the data in a local text log. Parameters: An alternative is to save the data in a local text log. Parameters:
    -  * **''ajb_save_dns''** — flag for writing to a text file\\ **''ajb_save_dns=2''** allows you to enable sending DNS queries via IPFIX+  * **''ajb_save_dns''** — flag for writing to a text file.\\ 
     +    * **''ajb_save_dns=0''** — do not save 
     +    * **''ajb_save_dns=1''** — by default, send DNS responses via IPFIX 
     +    * **''ajb_save_dns=2''** — enables sending DNS queries via IPFIX 
     +    * **''ajb_save_dns=4''** — save DNS responses of type MX
       * **''ajb_dns_ftimeout''** — timeout (minutes) for switching to the next file   * **''ajb_dns_ftimeout''** — timeout (minutes) for switching to the next file
       * **''ajb_dns_bufsize''** — file write buffer   * **''ajb_dns_bufsize''** — file write buffer
    Line 321: Line 328:
     Switching to the next file occurs when the file size reaches ''ajb_dns_fsize'' or the file is not empty and ''ajb_dns_ftimeout'' has passed Switching to the next file occurs when the file size reaches ''ajb_dns_fsize'' or the file is not empty and ''ajb_dns_ftimeout'' has passed
      
    -ajb_save_dns_format : format for writing to a text file+''ajb_save_dns_format'': format for writing to a text file
       * **''ts''** - time   * **''ts''** - time
       * **''ipsrc''** — ip source   * **''ipsrc''** — ip source