| Both sides previous revisionPrevious revisionNext revision | Previous revision |
| en:dpi:dpi_options:opt_statistics:statistics_ipfix:start [2022/04/02 12:58] – mzhalilova | en:dpi:dpi_options:opt_statistics:statistics_ipfix:start [Unknown date] (current) – removed - external edit (Unknown date) 127.0.0.1 |
|---|
| ====== 3 Configuring export in IPFIX (Netflow 10) ====== | |
| {{indexmenu_n>3}} | |
| NetFlow control can be changed by next setting: | |
| <code> | |
| netflow_full_collector_type=1 | |
| </code> | |
| here:\\ | |
| * "**0**" - export NetFlow5 ( default ).\\ | |
| * "**1**" - export UDP IPFIX.\\ | |
| * "**2**" - export TCP IPFIX. | |
| |
| ^ Export template for IPFIX format (Netflow v10) ^^^^^^^ | |
| ^ № ^ Size ^ Type ^ IANA ^ Description ^ Note ^ Use in QoEStor ^ | |
| | 1 | 8 | int64 | 0 |OCTET_DELTA_COUNT | NetFlow v9 analogy IN_BYTES| Used | | |
| | 2 | 8 | int64 | 0 |PACKET_DELTA_COUNT | NetFlow v9 analogy IN_PKTS| Used | | |
| | 4 | 1 | int8 | 0 |PROTOCOL_IDENTIFIER | NetFlow v9 analogy PROTOCOL| Used | | |
| | 5 | 1 | int8 | 0 |IP_CLASS_OF_SERVICE | NetFlow v9 analogy TOS| Used | | |
| | 7 | 2 | int16 | 0 |SOURCE_TRANSPORT_PORT |NetFlow v9 analogy L4_SRC_PORT| Used | | |
| | 8 | 4 | int32 | 0 |SOURCE_IPV4_ADDRESS|NetFlow v9 analogy IPV4_SRC_ADDR| Used | | |
| | 11 | 2 | int16 | 0 |DESTINATION_TRANSPORT_PORT|NetFlow v9 analogy L4_DST_PORT| Used | | |
| | 12 | 4 | int32 | 0 |DESTINATION_IPV4_ADDRESS|NetFlow v9 analogy IPV4_DST_ADDR| Used | | |
| | 16 | 4 | int32 | 0 |BGP_SOURCE_AS_NUMBER|NetFlow v9 analogy SRC_AS| Used | | |
| | 17 | 4 | int32 | 0 |BGP_DESTINATION_AS_NUMBER|NetFlow v9 analogy DST_AS| Used | | |
| | 152 | 8 | int64 | 0 |FLOW_START_MILLISECOND| | Used | | |
| | 153 | 8 | int64 | 0 |FLOW_END_MILLISECOND| | Used | | |
| | 10 | 2 | int16 | 0 |INPUT_SNMP|NetFlow v9 analogy ingressInterface| Used | | |
| | 14 | 2 | int16 | 0 |OUTPUT_SNMP|NetFlow v9 analogy egressInterface| Used | | |
| | 60 | 1 | int8 | 0 |IP_VERSION|NetFlow v9 analogy IP_PROTOCOL_VERSION| Used | | |
| | 2000 | 8 | int64 | 43823 |SESSION_ID| | Used | | |
| | 2001 | - | string | 43823 |HTTP_HOST or CN_HTTPS| | Used | | |
| | 2002 | 2 | int16 | 43823 |DPI_PROTOCOL| | Used | | |
| | 2003 | - | string | 43823 |LOGIN |Radius UserName | Used | | |
| | 225 | 4 | int32 | 0 |POST_NAT_SOURCE_IPV4_ADDRESS| | Used | | |
| | 227 | 2 | int16 | 0 |POST_NAT_SOURCE_TRANSPORT_PORT| | Used | | |
| | 2010 | 2 | int16 | 43823 |FRGMT_DELTA_PACKS|Fragmented packets delta. Used in QoEStor. | Used | | |
| | 2011 | 2 | int16 | 43823 |REPEAT_DELTA_PACK|Retransmissions delta. Used in QoEStor. | Used | | |
| | 2012 | 4 | int32 | 43823 |PACKET_DELIVER_TIME|Latency (RTT/2), ms (RTT = Round Trip Time). Used in QoEStor. | Used | | |
| | 2016 | 2 | int16 | 43823 |BRIDGE_CHANNEL_NUM|Channel number (vchannel) or bridge. If vchannel is configured in the DPI configuration, then the channel number will be transmitted, otherwise the bridge number. Used in QoEStor. | Used | | |
| |
| The export pattern in IPFIX format for IPv6 differs only in the absence of the fields:** //SOURCE_IPV4_ADDRESS//, //DESTINATION_IPV4_ADDRESSs//, //POST_NAT_SOURCE_IPV4_ADDRESS//, //POST_NAT_SOURCE_TRANSPORT_PORT//**, - and the presence of the following fields: | |
| |
| ^ Export template for IPv6 ^^^^^^ | |
| ^ № ^ Num of bytes ^ Data type ^ IANA ^ Description ^ Note ^ | |
| | 27 | 16 | int128 | 0 |SOURCE_IPV6_ADDRESS|NetFlow v9 analogy IPV6_SRC_ADDR| | |
| | 28 | 16 | int128 | 0 |DESTINATION_IPV6_ADDRESS|NetFlow v9 analogy IPV6_DST_ADDR| | |
| |
| <note tip>To collect, process and store IPFIX we suggest using __[[en:dpi:dpi_components:qoestor:start|the QoE Store statistics module]]__ and __[[en:dpi:dpi_components:dpiui:start|DPIUI2 graphical interface]]__.\\ | |
| |
| For extended information in IPFIX format can be used any universal IPFIX collector, for instance - __[[https://github.com/CESNET/ipfixcol/tree/master/base|CESNET ipfixcol]]__ or our utility __[[en:dpi:dpi_components:utilities:ipfixreceiver|IPFIX Receiver]]__.</note> | |
