Chapter18
IPFIXConfiguration
TableofContents
IPFIXOverview...............................................................161
ConguringIPFIX............................................................163
IPFIXCongurationExample.............................................166
IPFIXMaintenanceandDiagnosis......................................166
IPFIXOverview
IPFIXOverview
IPFIX(IPFlowInformationExport)isusedtoanalyzeandperform
statisticstocommunicationtrafcandowdirectioninnetwork.In
2003,IETFselectNetowV9asIPFIXstandardfrom5candidate
schemes.
Toanalyzeandperformstatisticstodataowinnetwork,itis
neededtodistinguishtypesofpacketstransmittedinnetwork.
Duetonon-connectionorientedcharacteristicsofIPnetwork,the
communicationofdifferenttypesofservicesinnetworkcanbea
seriesofIPpacketssentfromoneterminaldevicetoanotherter-
minaldevice.Thisseriesofpacketsactuallyformsonedataow
ofaserviceincarriernetwork.Ifmanagementsystemcandistin-
guishallowsintheentirenetworkandcorrectlyrecordtransmit
timeofeachow,occupiednetworkport,transmitsource/desti-
nationaddressandsizeofdataows,trafcandowdirectionof
allcommunicationsintheentirecarriernetworkcanbeanalyzed
andperformedwithstatistics.
Bytellingdifferencesamongdifferentowsinnetwork,itisavail-
abletojudgeiftwoIPpacketsbelongtothesameoneow.This
canberealizedbyanalyzing7attributesofIPpacket:sourceIP
address,destinationIPaddress,sourceportid,destinationid,L3
protocoltype,TOSbyte(DSCP),ifIndexfornetworkdeviceinput
(oroutput).
Withabove7attributesofIPpacket,owsofdifferentservice
typestransmittedinnetworkcanberapidlydistinguished.Each
distinguisheddataowcanbetracedseparatelyandcountedaccu-
rately,itsowdirectioncharacteristicssuchastransmitdirection
anddestinationcanberecorded,andthestarttime,endtime,ser-
CondentialandProprietaryInformationofZTECORPORATION161