Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revision | |||
en:statistics_settings [2015/04/06 17:12] – translator1 | en:statistics_settings [Unknown date] (current) – removed - external edit (Unknown date) 127.0.0.1 | ||
---|---|---|---|
Line 1: | Line 1: | ||
- | The option is configured or disabled by parameters in configuration file / | ||
- | |||
- | Statistics export configuration: | ||
- | |||
- | To switch on the export of statistics: | ||
- | 0 or no parameter - export disabled;\\ | ||
- | 1 - export statistics by protocols (port numbers);\\ | ||
- | 2 - export statistics by directions (independent systems' | ||
- | 4 - export statistics for billing;\\ | ||
- | 8 - export the complete statistical information on sessions;\\ | ||
- | 3 = 1 + 2 - export statistics by protocols and by directions at the same time. Other values are combined similarly. | ||
- | < | ||
- | |||
- | The network interface name to export netflow with statistics: | ||
- | < | ||
- | |||
- | Data export period in seconds: | ||
- | < | ||
- | |||
- | IP address and port number of netflow collector for statistics by protocols: | ||
- | < | ||
- | |||
- | Directions to collect and aggregate data:\\ | ||
- | 1 for external independent systems only (OK for household operators as there are no other independent systems rather than the operator itself on one side);\\ | ||
- | 2 for internal independent systems only;\\ | ||
- | 3 = 1 + 2 for both (OK for transit operators. However, as the aggregation by AS is made separately, data would be counted twice in the exported statistics - for each of AS participating in data transmission). | ||
- | < | ||
- | |||
- | IP address and port number of netflow collector with statistics by directions. One has to specify the separate collector to avoid data messing with statistics by protocols: | ||
- | < | ||
- | |||
- | IP address and port number of netflow collector with statistics for billing. One has to specify the separate collector to avoid data messing with other statistics: | ||
- | < | ||
- | The billing statistics is formed only for those subscribers that have [[dpi_billing|service 9]] enabled. The whole traffic volume is counted by default. This includes packet headers as well. In order to count the useful traffic only((The traffic with no packet headers may be 3.5 times smaller than the total one. For example, the minimal torrent UDP packet may be 64 bytes. The UDP header is 28 bytes and Ethernet frame size is 18 bytes. The resulting useful information is 18 bytes only of 64 total.)) please specify: | ||
- | < | ||
- | [[priority_config|The traffic class assigned by DPI]] is specified in TOS field of netflow with billing statistics. This information can be used to create " | ||
- | |||
- | IP address and port number of netflow collector with full statistics. One has to specify the separate collector to avoid data messing with other statistics: | ||
- | < | ||
- | netflow_passive_timeout=20 | ||
- | netflow_active_timeout=60 | ||
- | </ | ||
- | netflow_passive_timeout=20 - is the time to wait for session activity. If no activity in this time, the session is treated as closed and its information is transmitted.\\ | ||
- | netflow_active_timeout=60 - is the time to report on the long sessions: in fact, such sessions are split into fragments of this duration.\\ | ||
- | The complete statistics preserved original port numbers. The information on detected protocols is sent in normally empty bytes 46-47. In case one needs to analyse the protocols in use, the system can be configured to send the protocol information in the port number: | ||
- | < | ||
- | |||
- | :!: Note: | ||
- | |||
- | netflow protocol does not ensure the delivery of packets as it works over UDP. If the collector has not enough capacity to receive the data, some packets are just lost. The collector has to receive data at rates no less than 60 Mb/s to handle full statistics for 10Gb channel. Please check your collector' | ||
- | |||
- | At the same time short peaks up to 100 Mb/s may happen when sending netflow from DPI. Few collectors are able to receive such data flow with no losses, for example nfsen/ | ||
- | < | ||
- | |||