Flow Monitoring overview
vRouters support the NetFlow Version 9 and IP Flow Information Export (IPFIX), which is based on the Internet Engineering Task Force (IETF) standard. This standard defines how IP flow information is formatted and transferred from an exporter (in this case, a vRouter) to a NetFlow collector, a system that collects IPv4 and IPv6 flow information, as shown in the following figure.
The exporter periodically collects information about packets that flow through the router into a flow record. Then, the exporter packs the record into a UDP packet and sends it to the collector. For more information about the NetFlow Version 9, refer to RFC 3954 and for more information about the IPFIX, refer to RFC 7011 export format.
The user can also choose the choose the packet and information fields to aggregate and export.
The NetFlow Version 9 and IPFIX export format is based on templates, which allows for an extensible design of the record format. This means that future enhancements of the Flow Monitoring service do not require changes to the export protocol.
The following tables describe the data that is extracted by the Flow Monitoring service from the sampled packets and exported to the NetFlow collector.
Field | Field ID |
---|---|
sourceIPv4Address | 8 |
destinationIPv4Address | 12 |
protocolIdentifier | 4 |
ipClassOfService | 5 |
sourceTransportPort | 7 |
destinationTransportPort | 11 |
ingressInterface | 10 |
ipNextHopIPv4Address | 15 |
tcpControlBits | 6 |
egressInterface | 14 |
flowDirection | 61 |
packetDeltaCount | 2 |
octetDeltaCount | 1 |
flowStartMilliseconds | 152 |
flowEndMilliseconds | 153 |
sourceIPv4PrefixLength | 9 |
destinationIPv4PrefixLength | 13 |
bgpNextHopIPv4Address | 18 |
bgpSourceAsNumber | 16 |
bgpDestinationAsNumber | 17 |
bgpPrevAdjacentAsNumber | 129 |
bgpNextAdjacentAsNumber | 128 |
Field | Field ID |
---|---|
sourceIPv6Address | 27 |
destinationIPv6Address | 28 |
protocolIdentifier | 4 |
ipClassOfService | 5 |
sourceTransportPort | 7 |
destinationTransportPort | 11 |
ingressInterface | 10 |
flowDirection | 61 |
ipNextHopIPv6Address | 62 |
tcpControlBits | 6 |
egressInterface | 14 |
packetDeltaCount | 2 |
octetDeltaCount | 1 |
flowStartMilliseconds | 152 |
flowEndMilliseconds | 153 |
sourceIPv6PrefixLength | 29 |
destinationIPv6PrefixLength | 30 |
bgpNextHopIPv6Address | 63 |
bgpSourceAsNumber | 16 |
bgpDestinationAsNumber | 17 |
bgpPrevAdjacentAsNumber | 129 |
bgpNextAdjacentAsNumber | 128 |