| Both sides previous revisionPrevious revisionNext revision | Previous revision |
| en:dpi:dpi_options:opt_li:li_ipfix [2025/07/24 13:05] – [DNS] elena.krasnobryzh | en:dpi:dpi_options:opt_li:li_ipfix [2025/10/31 08:56] (current) – elena.krasnobryzh |
|---|
| Any universal IPFIX collector that accepts templates or the __[[en:dpi:dpi_components:utilities:ipfixreceiver2|IPFIX Receiver]]__ utility is suitable for collecting information in IPFIX format. | Any universal IPFIX collector that accepts templates or the __[[en:dpi:dpi_components:utilities:ipfixreceiver2|IPFIX Receiver]]__ utility is suitable for collecting information in IPFIX format. |
| |
| To receive, process and store ClickStream, we suggest using the __[[en:dpi:dpi_components:qoestor|QoE Store software]]__ and __[[en:dpi:dpi_components:dpiui|DPIUI2 graphical interface]]__. | To receive, process and store ClickStream, we suggest using the __[[en:dpi:qoe_analytics|QoE Store software]]__ and __[[en:dpi:dpi_components:dpiui|DPIUI2 graphical interface]]__. |
| |
| If the link quality between SSG and NetFlow/IPFIX collector is insufficient, SSG skips sending some statistics to save performance. A message is displayed in ''fastdpi_alert.log'' when a chunk of information is skipped: | If the link quality between SSG and NetFlow/IPFIX collector is insufficient, SSG skips sending some statistics to save performance. A message is displayed in ''fastdpi_alert.log'' when a chunk of information is skipped: |
| * **''dbg_log_mask=0x80''** — logging statistics about export. | * **''dbg_log_mask=0x80''** — logging statistics about export. |
| |
| | The ''ipfix_mtu_limit'' parameter sets the maximum UDP packet size when sending IPFIX. By default, it equals the minimum MTU of the interfaces used for sending. |
| ==== IPFIX format template for Clickstream ==== | ==== IPFIX format template for Clickstream ==== |
| |
| | 2017 | - | raw | 43823 | MPLS Labels || | | 2017 | - | raw | 43823 | MPLS Labels || |
| | 2016 | 2 | int16 | 43823 | BRIDGE_CHANNEL_NUM | Channel (vchannel) or bridge number. If vchannel is set in the DPI configuration, the channel number will be transmitted, otherwise the bridge number will be transmitted | | | 2016 | 2 | int16 | 43823 | BRIDGE_CHANNEL_NUM | Channel (vchannel) or bridge number. If vchannel is set in the DPI configuration, the channel number will be transmitted, otherwise the bridge number will be transmitted | |
| | | 224 | 8 | uint64 | - | ipTotalLength | Total IP packet size | |
| | | 3206 | 2 | uint16 | 43823 | DNS transaction id | DNS Transaction ID | |
| |
| An alternative is to save the data in a local text log. Parameters: | An alternative is to save the data in a local text log. Parameters: |
| * **''ajb_save_dns''** — flag for writing to a text file\\ **''ajb_save_dns=2''** allows you to enable sending DNS queries via IPFIX | * **''ajb_save_dns''** — flag for writing to a text file.\\ |
| | * **''ajb_save_dns=0''** — do not save |
| | * **''ajb_save_dns=1''** — by default, send DNS responses via IPFIX |
| | * **''ajb_save_dns=2''** — enables sending DNS queries via IPFIX |
| | * **''ajb_save_dns=4''** — save DNS responses of type MX |
| * **''ajb_dns_ftimeout''** — timeout (minutes) for switching to the next file | * **''ajb_dns_ftimeout''** — timeout (minutes) for switching to the next file |
| * **''ajb_dns_bufsize''** — file write buffer | * **''ajb_dns_bufsize''** — file write buffer |
| Switching to the next file occurs when the file size reaches ''ajb_dns_fsize'' or the file is not empty and ''ajb_dns_ftimeout'' has passed | Switching to the next file occurs when the file size reaches ''ajb_dns_fsize'' or the file is not empty and ''ajb_dns_ftimeout'' has passed |
| |
| ajb_save_dns_format : format for writing to a text file | ''ajb_save_dns_format'': format for writing to a text file |
| * **''ts''** - time | * **''ts''** - time |
| * **''ipsrc''** — ip source | * **''ipsrc''** — ip source |
