Cflowd Configuration Overview
710 Router Configuration Guide
The following data is maintained for each individual flow in the raw flow cache:
• Source IP address
• Destinations IP address
• Source port
• Destination port
• Forwarding status
• Input interface
• Output interface
• IP protocol
•TCP flags
• First timestamp (of the first packet in the flow)
• Last timestamp (timestamp of last packet in the flow prior to expiry of the flow)
• Source AS number for peer and origin (taken from BGP)
• Destination AS number for peer and origin (taken from BGP)
• IP next hop
• BGP next hop
• ICMP type and code
• IP version
• Source prefix (from routing)
• Destination prefix (from routing)
• MPLS label stack from label 1 to 6
Within the raw flow cache, the following characteristics are used to identify an individual
flow:
• Ingress interface
• Source IP address
• Destination IP address
• Source transport port number
• Destination transport port number
• IP protocol type
• IP TOS byte
• Virtual router id
• ICMP type and code
•Direction
• MPLS labels