This is an old revision of the document!
For Clickstream data analisys (subscribers' http requests) and SIP (VOIP unciphered data) on external systems IPFIX export is available.
Clickstream experts is configured by folowing parameters:
ipfix_dev=em1 ipfix_udp_collectors=1.2.3.4:1500,1.2.3.5:1501 ipfix_tcp_collectors=1.2.3.6:9418 dbg_log_mask=0x80
where em1 NIC using for export
ipfix_udp_collectors IP of udp collectors
ipfix_tcp_collectors IP of tcp collectors
dbg_log_mask=0x80 logging statistics about export
IPFIX format template for Clickstream
| № | Size in bytes | Type | IANA | Description |
|---|---|---|---|---|
| 1001 | 4 | int32 | 43823 | TIMESTAMP |
| 1002 | - | string | 43823 | LOGIN |
| 1003 | 4 | ipv4 | 43823 | IP SOURCE |
| 1004 | 4 | ipv4 | 43823 | IP DESTINATION |
| 1005 | - | string | 43823 | HOSTNAME/CNAME |
| 1006 | - | string | 43823 | PATH |
| 1007 | - | string | 43823 | REFER |
| 1008 | - | string | 43823 | USER AGENT |
| 1009 | - | string | 43823 | COOCKIE |
| 2000 | 8 | int64 | 43823 | SESSION ID |
Clickstream is usefulnot only local authorities but ISP also for subscriber interest profiles, top of sites, ads targeting, prevent outflow of subscribers etc.
SIP metadata export is configured by folowing parameters:
ipfix_dev=em1 ipfix_meta_udp_collectors=1.2.3.4:1500,1.2.3.5:1501 ipfix_meta_tcp_collectors=1.2.3.6:9418 dbg_log_mask=0x80
where em1 NIC for data export для экспорта
ipfix_meta_udp_collectors IP of udp collectors
ipfix_meta_tcp_collectors IP of tcp collectors
dbg_log_mask=0x80 logging statistics about export
IPFIX format template for export SIP metadata
| № | Size in Bytes | Type | IANA | Description |
|---|---|---|---|---|
| 0 | 4 | int32 | 1001 | Время |
| 1 | - | string | 1002 | Login |
| 2 | 4 | ipv4 | 1003 | ip_src |
| 3 | 4 | ipv4 | 1004 | ip_dst |
| 4 | 8 | int64 | 2000 | session_id |
| 5 | - | string | 3000 | msg code |
| 6 | 2 | int16 | 3001 | status code |
| 7 | - | string | 3002 | uri |
| 8 | - | string | 3003 | from |
| 9 | - | string | 3004 | to |
| 10 | - | string | 3005 | callid |
| 11 | - | string | 3006 | uagent |
| 12 | - | string | 3007 | ctype |