====== Set up NetFlow export by protocols, directions and billing ======
{{indexmenu_n>3}}
Changing the settings or disabling the option is done by editing
The configuration file is ''/etc/dpi/fastdpi.conf''.
NetFlow options are cold and you need to restart the service.
===== NetFlow on protocols =====
IP address and NetFlow collector port number with statistics **by protocols**:
netflow_collector=192.168.0.1:9997
===== NetFlow in directions =====
IP address and NetFlow collector port number with statistics **by direction**:
netflow_as_collector=192.168.0.1:9998
Directions for which statistics and aggregation are collected:
netflow_as_direction=1
* 1 - only for external autonomous systems (suitable for home operators, since there are no other autonomous systems on one side apart from the operator himself)
* 2 - only for internal autonomous systems
* 3 = 1 + 2 - suitable for transit operators, but since AS is an independent aggregation, the exported statistics data will get 2 times - for each of the AS, participants in the transfer
===== NetFlow for billing =====
IP address and NetFlow collector port number with **statistics for billing**, you need to allocate a separate collector so that the data is not mixed with other statistics:
netflow_bill_collector=192. 168.0.1:9995
Billing statistics are transmitted only by subscribers who are connected to [[en:dpi:dpi_components:platform:dpi_billing|service 9]].\\
IPFIX does not transmit information about the host IP:port with which the subscriber exchanges information.
Determination of the format of the transmitted information:
netflow_bill_collector_type=2
* 0 - netflow_v5 (default)
* 1 - ipfix udp
* 2 - ipfix tcp
By default, the full amount of information transmitted, including packet headers L1-L7, is considered to be considered payload and only L3-L7 headers must specify the parameter:
netflow_bill_method=1
In netflow, the TOS field of billing statistics transmits [[en:dpi:dpi_options:opt_priority:priority_config|the traffic class assigned by DPI]], which can be used to create flexible pricing plans.
===== Sending template to IPFIX =====
- The TCP.\\ Template transport protocol is sent once after the TCP session has been established.
- The UDP.\\ Template transport protocol is sent by default every 20 seconds. Adjusted by ''ipfix_udp_template_timer''.
===== Example of configuration =====
[[en:dpi:qoe_analytics:implementation_administration:configuration_setup:dpi|An example of configuration is described in the section QoE Stor: DPI Configuration.]]