This is an old revision of the document!

Settings for NAT flow export in text file on SCAT DPI server are in configuration file /etc/dpi/fastdpi.conf:

ajb_save_nat=1
ajb_save_nat_format=ts:ssid:event:login:proto:ipsrc:portsrc:ipsrcpostnat:portsrcpostnat:ipdst:portdst
ajb_nat_path=/var/dump/dpi
ajb_nat_ftimeout=30

here
ajb_save_nat=1 activate export NAT flows in text file
ajb_nat_path=/var/dump/dpi directory for files with NAT flows (default /var/dump/dpi)
ajb_nat_ftimeout=30 time period of records
ajb_save_nat_format=ts:ssid:event:login:proto:ipsrc:portsrc:ipsrcpostnat:portsrcpostnat:ipdst:portdst list and order of recorder fields, here

 
ts - timestamp
ssid - session id (for link with Netflow/IPFIX by volume)
event - event : 1 - NAT44 Session create, 2 - NAT44 Session delete
login - subscriber login 
ipsrc - IP address of request source (subscriber)
portsrc - port of request source (subscriber)
ipsrcpostnat - IP address of request source (subscriber) after NAT translation 
portsrcpostnat - port of request source (subscriber) after NAT translation 
ipdst - destination IP address (host)
portdst - destination port (host)