====== General description ======
{{indexmenu_n>1}}
VAS Experts DPI exports statistics in formats:
  * [[https://en.wikipedia.org/wiki/IP_Flow_Information_Export|IPFIX (NetFlow v10)]]
  * [[https://en.wikipedia.org/wiki/NetFlow|netflow5 v5]]

====== IPFIX (NetFlow v10) ======
Full statisctics by sessions is exported for the billing system. You can find the description of format in [[en:dpi:dpi_options:opt_statistics:statistics_ipfix|Configuring export in IPFIX]] section.
To collect, process and store NetFlow, we suggest using the [[en:dpi:dpi_components:qoestor|QoE Store software]] and the [[en:dpi:dpi_components:dpiui|DPIUI2 graphical interface]].

The section [[en:dpi:dpi_options:opt_li:li_ipfix|Loging using IPFIX]] describes the export of meta-information:
  * ClickStream
  * SIP
  * FTP
  * instant messengers (XMPP)
  * mail protocols (POP, IMAP, SMTP)
  * raw unresolved metadata.

====== NetFlow v5 ======
This format is supported by most of free and commercial tools for collecting and analysing stat data. For your convenience, we deliver [[en:dpi:dpi_components:utilities:oldutility:nfsen|free SW to view and analyse statistics]] - slightly adopted version of [[http://nfsen.sourceforge.net|nfsen]], with extensions to build reports by protocols and independent systems' names.

Transmission of the DPI information by netflow5 has some peculiarities:
 
  - The information on the used protocol is defined in [[http://netflow.caligare.com/netflow_v5.htm|dstport]] field (port number). [[http://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml|The port number specified by IANA association for the protocol]] is used when available. However, for [[en:dpi:dpi_options:opt_statistics:statistics_info|the protocols with floating number (torrents, skype and so on)]] the special number in the upper range (49152-65534) is reserved. This range is specified by IANA for private ports. The port number 65535 is assigned for protocols that failed to be detected.
  - The statistics by protocols is transmitted in aggregated format. DPI accumulates statistics by the protocol by combining an information from various sessions. Then DPI sends this information to a collector within the specified schedule. This method allows dramatical reduction of amount of transmitted data.
  - Direction information is defined by  [[http://netflow.caligare.com/netflow_v5.htm|dst_as]] field (independent system's number)    
  - The statistics by directions is transmitted in aggregated format. DPI accumulates statistics by the direction (AS number) by combining an information from various sessions. Then DPI sends this information to a collector within the specified schedule. This method allows dramatical reduction of amount of transmitted data.