Vyatta NOS documentation

Learn how to install, configure, and operate Vyatta Network Operating System (Vyatta NOS), which helps to drive our virtual networking and physical platforms portfolio.

Flow Monitoring overview

vRouters support the NetFlow Version 9 and IP Flow Information Export (IPFIX), which is based on the Internet Engineering Task Force (IETF) standard. This standard defines how IP flow information is formatted and transferred from an exporter (in this case, a vRouter) to a NetFlow collector, a system that collects IPv4 and IPv6 flow information, as shown in the following figure.

The exporter periodically collects information about packets that flow through the router into a flow record. Then, the exporter packs the record into a UDP packet and sends it to the collector. For more information about the NetFlow Version 9, refer to RFC 3954 and for more information about the IPFIX, refer to RFC 7011 export format.

The user can also choose the choose the packet and information fields to aggregate and export.

Figure 1. vRouter flow-monitoring architecture

The NetFlow Version 9 and IPFIX export format is based on templates, which allows for an extensible design of the record format. This means that future enhancements of the Flow Monitoring service do not require changes to the export protocol.

The following tables describe the data that is extracted by the Flow Monitoring service from the sampled packets and exported to the NetFlow collector.

Table 1. Exported NetFlow Version 9 and IPFIX IPv4 data
Field Field ID
sourceIPv4Address 8
destinationIPv4Address 12
protocolIdentifier 4
ipClassOfService 5
sourceTransportPort 7
destinationTransportPort 11
ingressInterface 10
ipNextHopIPv4Address 15
tcpControlBits 6
egressInterface 14
flowDirection 61
packetDeltaCount 2
octetDeltaCount 1
flowStartMilliseconds 152
flowEndMilliseconds 153
sourceIPv4PrefixLength 9
destinationIPv4PrefixLength 13
bgpNextHopIPv4Address 18
bgpSourceAsNumber 16
bgpDestinationAsNumber 17
bgpPrevAdjacentAsNumber 129
bgpNextAdjacentAsNumber 128
Table 2. Exported NetFlow Version 9 and IPFIX IPv6 data
Field Field ID
sourceIPv6Address 27
destinationIPv6Address 28
protocolIdentifier 4
ipClassOfService 5
sourceTransportPort 7
destinationTransportPort 11
ingressInterface 10
flowDirection 61
ipNextHopIPv6Address 62
tcpControlBits 6
egressInterface 14
packetDeltaCount 2
octetDeltaCount 1
flowStartMilliseconds 152
flowEndMilliseconds 153
sourceIPv6PrefixLength 29
destinationIPv6PrefixLength 30
bgpNextHopIPv6Address 63
bgpSourceAsNumber 16
bgpDestinationAsNumber 17
bgpPrevAdjacentAsNumber 129
bgpNextAdjacentAsNumber 128