文件名称:NetFlow Export Datagram Format
文件大小:74KB
文件格式:PDF
更新时间:2016-11-07 15:10:14
NetFlow Export Datagram Format
NetFlow exports flow information in UDP datagrams in one of four formats: • Version 1 • Version 5 • Version 7 • Version 8 The Version 1 (V1) format is the original format supported in the initial NetFlow releases. The Version 5 (V5) format is an enhancement that adds Border Gateway Protocol (BGP) autonomous system information and flow sequence numbers. The Version 7 (V7) format is an enhancement that exclusively supports NetFlow with Cisco Catalyst 5000 series switches equipped with a NetFlow feature card (NFFC). V7 is not compatible with Cisco routers. The Version 8 (V8) format is an enhancement that adds router-based aggregation schemes. Versions 2, 3, 4, and 6 either were not released or are not supported by FlowCollector. In Versions 1, 5, and 7, the datagram consists of a header and one or more flow records. The first field of the header contains the version number of the export datagram. Typically, a receiving application that accepts any of the format versions allocates a buffer large enough for the largest possible datagram from any of the format versions and then uses the header to determine how to interpret the datagram. The second field in the header contains the number of records in the datagram and should be used to search through the records. All fields described in the format version tables are in network byte order. Table B-1 and Table B-2 describe the V1 header and flow record format, respectively. Table B-3 and Table B-4 describe the V5 header and flow record format, respectively. Table B-5 and Table B-6 describe the V7 header and flow record format, respectively. Table B-7 describes the V8 header format. Table B-8 describes the V8 RouterAS flow record format. Table B-9 describes the V8 RouterProtoPort flow record. Table B-10 describes the V8 RouterDstPrefix flow record. Table B-11 describes the RouterSrcPrefix flow record, and Table B-12 describes the RouterPrefix flow record.