Zte ZXR10 ZSR V2 - Page 118

ZXR10ZSRV2CongurationGuide(SystemManagement)
àPacketinformation:Forexample,source/destinationIPaddress,TypeOf
Service(T oS)eld,source/destinationTCP/UDPportnumber.
àRouteinformation:Forexample,nexthopIPaddress.
àOtherinformation:Packetingress/egressinterfaceindex,sampledirection.
NetFlowtakesowasstatisticobject.Thepacketswhichbelongtothesameow
aresummarizedandstored.NetFlowv5usesoctettodenetheuniqueow,and
NetFlowv9permitsthatuserdenesowbyitself.Forexample,usercanuse
sourceanddestinationIPaddressestodeneaow,thenallthepacketswhich
havethesourceanddestinationaddressesaredenedasaow.Peoplecallthe
octet(sourceanddestinationIPaddresses)askeyeld.Useralsocancongure
non-keyeldtoobtainotherinformationoftheow,suchaspacketnumber,bytes
andnexthopIPaddress.
lNetowhasbuffer.Thesampledpacketsarestoredatbufferatrst.Thesizeofevery
owisthesumofallkeyeldsandnon-keyelds.Afterapacketisanalyzed,nd
whethertheowalreadyexistsaccordingtoitskeyled.
àIfitalreadyexists,thenupdatetheow’snon-keyeld.
àIfitdoesnotexist,addthenewowintobuffer.
lWhentheowstoredatbuffersatisesthefollowingconditions,itwillbesenttoremote
server.
àSendallowinformationtoserverwhenbufferisfull.
àAowisinactiveifthereisnopacketbelongstotheowinagiventime.Send
theowtoserver.Thegiventimeiscalledactiveagingtime.Itcanbecongured
byuser.
àForalongtermactiveow,thestatisticinformationissenttoserveronceina
while.Theintervaliscalledinactiveagingtime.Itcanbeconguredbyuser.
lAtpresent,ZXR10ZSRV2canrecordowinformationinNetFlowv5,NetFlowv8,
NetFlowv9andIPFIXpacketstosendtotheserver.
àSincetheformatofNetFlowv5isxed,Netowv5onlyoutputthexedeldow
information.
àTheformatofNetFlowv8packetisalsoxed.ComparingwithNetFlowv5,
NetFlowv8canoutputmultipletypesofeldowinformation.ZXR10ZSRV2
supportsthev8Protocol-PortMatrixpacketformat.
àNetFlowv9/IPFIXsupportsusertocustomizekeyeldornon-keyeld.The
NetFlowv9/IPFIXpacketisbasedonmodule.Themoduleincludesuser-dened
keyeldandnon-keyeld,andeverymodulehasauniquemoduleID.NetFlow
sendsmoduletoservercircularly.WhenaserverreceivestheNetFlowv9/IPFIX
packetincludingowinformation,itwillndthecorrespondingmoduleaccording
tothecontainedmoduleID.
lOnNetFlowserver,thereceivedowinformationisnormallystoredatdatabase,and
NetFlowanalysissoftwarecananalyzetheentitydata.
12-2
SJ-20140504150128-007|2014-05-10(R1.0)ZTEProprietaryandCondential