Accounting data export using the IPFIX format

Starting from the VAS Experts DPI version 8.0, accounting data along with the Radius protocol data can also be exported using the ipfix format. Ipfix export is configured by the following parameters in fastpcrf.conf:

ipfix_dev=em1
ipfix_udp_collectors=1.2.3.4:1500,1.2.3.5:1501
ipfix_tcp_collectors=1.2.3.6:9418

here em1 is the name of network interface used to export
ipfix_udp_collectors are the udp collectors addresses
ipfix_tcp_collectors are the tcp collectors addresses

Only "in use" collector addresses should be specified: for example, if only the UDP collector is supported then there is no need to specify the ipfix_tcp_collectors.

Шаблон:

№	Number of bytes	Data type	IANA	Description
1001	4	int32	43823	TIMESTAMP
4001	4	int32	43823	AAA event type: 0 - beginning, 1 - end, 2 - update
4002	-	string	43823	Accounting session ID (max. length is 64 bytes)
1003	4	ipv4	43823	IPv4 address, in case of IPv6 it is equal to 0
1103	16	ipv6	43823	IPv6 address, in case of IPv4 it is equal to 0 (::)
1002	-	string	43823	LOGIN
4003	4	int32	43823	Connection type
4004	-	string	43823	Calling-Station-Id
4005	-	string	43823	Called-Station-Id
4006	4	ipv4	43823	NAS-IP-Address, in case of IPv6 it is equal to 0
4106	16	ipv6	43823	NAS-IPv6-Address, in case of IPv4 it is equal to 0 (::)
4007	4	int32	43823	NAS-Port
4008	8	int64	43823	Incoming bytes number
4009	8	int64	43823	Outcoming bytes number

Connection types (value of the Framed-Protocol Radius attribute):

Type	Description
0	Attribute is not specified
1	PPP
2	SLIP
3	AppleTalk Remote Access Protocol (ARAP)
4	Gandalf proprietary SingleLink/MultiLink protocol
5	Xylogics proprietary IPX/SLIP
6	X.75 Synchronous
7	GPRS PDP Context

Ipfixreceiver configuration:

[InfoModel]
InfoElements =  timestamp,         43823, 1001, SECONDS, True
                event_type,        43823, 4001, INT32,   True
                acct_session_id,   43823, 4002, STRING
                source_ip4,        43823, 1003, IP4ADDR, True
                source_ip6,        43823, 1103, IP6ADDR
                login,             43823, 1002, STRING
                conn_type,         43823, 4003, INT32,   True
                calling_station_id,43823, 4004, STRING
                called_station_id, 43823, 4005, STRING
                NAS_ip4,           43823, 4006, IP4ADDR, True
                NAS_ip6,           43823, 4106, IP6ADDR
                NAS_port,          43823, 4007, INT32,   True
                input_bytes,       43823, 4008, UINT64,  True
                output_bytes,      43823, 4009, UINT64,  True

[ExportModelFile]
Delimiter = ;
ExportElements = timestamp, seconds, %%Y-%%m-%%dT%%H:%%M:%%S
                event_type
                acct_session_id
                source_ip4, decodeipv4
                source_ip6, decodeipv6
                login
                conn_type
                calling_station_id
                called_station_id
                NAS_ip4, decodeipv4
                NAS_ip6, decodeipv6
                NAS_port
                input_bytes
                output_bytes

A list of the correspondence between the Protocol and the port number in netfow5 can be found here.

Show pagesource Old revisions Backlinks

Profile

Settings

Accounting data export using the IPFIX format