1,775
edits
NetFlow/IPFIX interface: Difference between revisions
no edit summary
(Created page with "The Allegro Network Multimeter can generate NetFlow/IPFIX message for the traffic it anlayses. The :doc:`settings` allows to configure the IPFIX output. The IPFIX output can...") |
No edit summary |
||
| Line 30: | Line 30: | ||
The flow export contains the following data: | The flow export contains the following data: | ||
#Start and end timestamp in nanoseconds (start can be time of last export) | |||
#Source and destination IP address | |||
#Source and destination port | |||
#Layer 4 protocol (TCP, UDP, ...) | |||
#ingress and egress network interface | |||
#IP DSCP class | |||
#VLAN IDs, if applicable | |||
#Number of bytes and packets per direction | |||
Instead of the ingress/egress network interface, it is possible to | Instead of the ingress/egress network interface, it is possible to | ||
| Line 61: | Line 61: | ||
The message format is described as follows. | The message format is described as follows. | ||
IPFIX message content | '''IPFIX message content''' | ||
The IPFIX message contains the following fields: | The IPFIX message contains the following fields: | ||
| Line 73: | Line 72: | ||
| observationTimeMilliseconds = ... | | observationTimeMilliseconds = ... | ||
#message type 5 is the "interface throughput update" message. | |||
#the ingress interface describes the corresponding network interface on | |||
which the packets have been receveived. The value corresponds to the | which the packets have been receveived. The value corresponds to the | ||
interface ID in the interface stats web page. | interface ID in the interface stats web page. | ||
#the packet delta count describes the number of packets within the specificied | |||
interval. | interval. | ||
#the octet delta count describes the number of bytes of layer 2 within the | |||
specificied interval. | specificied interval. | ||
#the update interval describes the duration of the reported interval in | |||
milliseconds. | milliseconds. | ||
#the ovservation timestamp describes the UTC timestamp of the reported interval | |||
in milliseconds. | in milliseconds. | ||
| Line 90: | Line 89: | ||
bps = octectDeltaCount * 8 * 1000000 / updateInterval | bps = octectDeltaCount * 8 * 1000000 / updateInterval | ||
Detailed IPFIX message description | '''Detailed IPFIX message description''' | ||
The IPFIX module sends IPFIX templates for all its message which is | The IPFIX module sends IPFIX templates for all its message which is | ||