The S- and K-Series NetFlow Version 9 implementation supports 15 IPv4 (templates 256 through 271) and 15 IPv6 (templates 272 through 287) Version 9 templates. The templates are Extreme Networks defined supporting data record fields defined in the NetFlow standard. The contents of these data record fields are used by the collector software application for flow analysis. Ten base data record fields are included in all Version 9 templates. Up to an additional seven data record fields are included in the appropriate templates.
The S- and K-Series platform implementation of the NetFlow Version 9 templates is detailed in the following tables:
NetFlow Version 9 Template Header Support details the NetFlow Version 9 template header fields supported by all Version 9 templates.
NetFlow Version 9 Template Header Support
| NetFlow Version 9 Header | ||
|---|---|---|
| Data Field | Description | Templates |
| Format Version | NetFlow template Version 9 | All Templates |
| Flow Record Count | The total number of records in the export packet, which is the sum of the options flow set records, template flowset records, and data flowset records. | All Templates |
| Sys Up Time | Time in milliseconds since this device was first booted. | All Templates |
| Unix Seconds | Time in seconds since 0000 UTC 1970, at which the export packet leaves the exporter. | All Templates |
| Flow Sequence Counter | Incremental sequence counter of all export packets sent from the exporter. This is an accumulative count that lets the collector know if any packets have been missed. | All Templates |
| Source ID | Engine Type (1 = Line Card). Engine ID (One based module slot number). |
All Templates |
NetFlow Version 9 Template Data Record Field Support details the NetFlow Version 9 base data record fields supported by Version 9 templates. Base data record fields are supported by all IPv4 and IPv6 Version 9 templates. IPv4 specific data records are only supported by IPv4 templates. IPv6 specific data records are only supported by IPv6 templates.
NetFlow Version 9 Template Data Record Field Support
| NetFlow Version 9 Base Data Record Fields | ||
|---|---|---|
| Data Field | Description | Templates |
| SIP | (Source) IPv4 or IPv6 address of the device that transmitted the packet. | 256 - 271 IPv4 addresses 272 - 287 IPv6 addresses |
| DIP | (Destination) IPv4 or IPv6 address of the destination device. | 256 - 271 IPv4 addresses 272 - 287 IPv6 addresses |
| Dest IfIndex | MIBII 32-bit ID of the interface on which the packet was transmitted. | All templates |
| Source IfIndex | MIBII 32-bit ID of the interface on which the packet was received. | All templates |
| Packet Count | The number of packets switched through this flow. | All templates |
| Byte Count | The number of bytes switched through this flow. | All templates |
| Start Time | sysUptime in milliseconds at which the first packet of this flow was switched. | All templates |
| Last Time | sysUptime in milliseconds at which the last packet of this flow was switched. | All templates |
| IP Protocol | IP protocol for this flow. | All templates |
| Source TOS | (Source) Type of service field value for this flow. | All templates |
NetFlow Version 9 Additional Template Specific Data Record Field Support details the additional NetFlow Version 9 data record fields specific to a given Version 9 template.
NetFlow Version 9 Additional Template Specific Data Record Field Support
| NetFlow Version 9 Additional Template Specific Data Record Fields | ||
|---|---|---|
| Data Field | Description | Templates |
| Source MAC | Source MAC addresses for this flow. | IPv4: 257, 259, 261, 263, 265, 267, 269, 271 IPv6: 272, 274, 276, 278, 280, 282, 284, 286 |
| Destination MAC | Destination MAC addresses for this flow. | IPv4: 257, 259, 261, 263, 265, 267, 269, 271 IPv6: 272, 274, 276, 278, 280, 282, 284, 286 |
| Source VLAN | Source VLAN ID associated with the ingress interface for this flow. | IPv4: 258, 259, 262, 263, 266, 267, 270, 271 IPv6: 273, 274, 277, 278, 281, 282, 285, 286 |
| Destination VLAN | Destination VLAN ID associated with the egress interface for this flow. | IPv4: 258, 259, 262, 263, 266, 267, 270, 271 IPv6: 273, 274, 277, 278, 281, 282, 285, 286 |
| Layer 4 Source Port | TCP/UDP source port numbers (for example, FTP, Telnet, or equivalent). | IPv4: 260, 261, 262, 263, 268, 269, 270, 271 IPv6: 275, 276, 277, 278, 283, 284, 285, 286 |
| Layer 4 Destination Port | TCP/UDP destination port numbers (for example, FTP, Telnet, or equivalent). | IPv4: 260, 261, 262, 263, 268, 269, 270, 271 IPv6: 275, 276, 277, 278, 283, 284, 285, 286 |
| Next Hop Router | Specifies the BGP IPv4 or IPv6 next-hop address. | IPv4: 264, 265, 266, 267, 268, 269, 270, 271 IPv6: 279, 280, 281, 282, 283. 284, 285, 286 |
NetFlow Version 9 Templates provides a description of each IPv4 and IPv6 NetFlow Version 9 template per template ID.
NetFlow Version 9 Templates
| IPv4 Version 9 Templates | |
| Template ID | Description |
| 256 | Base switch template containing IPv4 base data record entries. |
| 257 | Switch and MAC ID template containing IPv4 base data record entries, along with source and destination MAC addresses. |
| 258 | Switch and VLAN ID template containing IPv4 base data record entries and source and destination VLAN IDs. |
| 259 | Switch, MAC ID, and VLAN ID template containing IPv4 base data record entries, along with source and destination MAC addresses and source and destination VLAN IDs. |
| 260 | Switch and Layer 4 port template containing IPv4 base data record entries, along with source and destination Layer 4 ports. |
| 261 | Switch, Layer 4 port, and MAC ID template containing IPv4 base data record entries, along with source and destination layer 4 ports and source and destination MAC addresses. |
| 262 | Switch, Layer 4 port, and VLAN ID template containing IPv4 base data record entries, along with source and destination Layer 4 ports and source and destination VLAN IDs. |
| 263 | Switch, Layer 4 port , MAC ID, and VLAN ID template containing IPv4 base data record entries, along with source and destination Layer 4 port, source and destination MAC addresses and source and destination VLAN IDs. |
| 264 | Switch and IPv4 route ID template containing IPv4 base data record entries, along with the route next hop. |
| 265 | Switch, IPv4 route ID, and MAC ID template containing IPv4 base data record entries, along with the route next hop and source and destination MAC addresses. |
| 266 | Switch, IPv4 route ID, and VLAN ID template containing IPv4 base data record entries, along with the route next hop, and source and destination VLAN IDs. |
| 267 | Switch, IPv4 next hop, MAC ID, and VLAN ID template containing IPv4 base data record entries, along with the route next hop, source and destination MAC addresses, and source and destination VLAN IDs. |
| 268 | Switch, IPv4 route ID, and Layer 4 port template containing IPv4 base data record entries, along with the route next hop, and source and destination Layer 4 ports. |
| 269 | Switch, IPv4 route ID, Layer 4 port and MAC ID template containing IPv4 base data record entries, along with the route next hop, source and destination Layer 4 port, and source and destination MAC addresses. |
| 270 | Switch, IPv4 next hop, Layer 4 port and VLAN ID template containing IPv4 base data record entries, along with the route next hop, source and destination Layer 4 ports, and source and destination VLAN IDs. |
| 271 | Switch, IPv4 next hop, Layer 4 port, MAC ID, and VLAN ID template containing IPv4 base data record entries, along with the IPv4 next hop, source and destination Layer 4 ports, source and destination MAC addresses, and source and destination VLAN IDs. |
| IPv6 Version 9 Templates | |
| 272 | Base switch template containing IPv6 base data record entries. |
| 273 | Switch and MAC ID template containing IPv6 base data record entries, along with source and destination MAC addresses. |
| 274 | Switch and VLAN ID template containing IPv6 base data record entries and source and destination VLAN IDs. |
| 275 | Switch, MAC ID, and VLAN ID template containing IPv6 base data record entries, along with source and destination MAC addresses and source and destination VLAN IDs. |
| 276 | Switch and Layer 4 port template containing IPv6 base data record entries, along with source and destination Layer 4 ports. |
| 277 | Switch, Layer 4 port, and MAC ID template containing IPv6 base data record entries, along with source and destination layer 4 ports and source and destination MAC addresses. |
| 278 | Switch, Layer 4 port, and VLAN ID template containing IPv6 base data record entries, along with source and destination Layer 4 ports and source and destination VLAN IDs. |
| 279 | Switch, Layer 4 port , MAC ID, and VLAN ID template containing IPv6 base data record entries, along with source and destination Layer 4 port, source and destination MAC addresses and source and destination VLAN IDs. |
| 280 | Switch and IPv6 route ID template containing IPv6 base data record entries, along with the route next hop. |
| 281 | Switch, IPv6 route ID, and MAC ID template containing IPv6 base data record entries, along with the route next hop and source and destination MAC addresses. |
| 282 | Switch, IPv6 route ID, and VLAN ID template containing IPv6 base data record entries, along with the route next hop, and source and destination VLAN IDs. |
| 283 | Switch, IPv6 next hop, MAC ID, and VLAN ID template containing IPv6 base data record entries, along with the route next hop, source and destination MAC addresses, and source and destination VLAN IDs. |
| 284 | Switch, IPv6 route ID, and Layer 4 port template containing IPv6 base data record entries, along with the route next hop, and source and destination Layer 4 ports. |
| 285 | Switch, IPv6 route ID, Layer 4 port and MAC ID template containing IPv6 base data record entries, along with the route next hop, source and destination Layer 4 port, and source and destination MAC addresses. |
| 286 | Switch, IPv6 next hop, Layer 4 port and VLAN ID template containing IPv6 base data record entries, along with the route next hop, source and destination Layer 4 ports, and source and destination VLAN IDs. |
| 287 | Switch, IPv6 next hop, Layer 4 port, MAC ID, and VLAN ID template containing IPv6 base data record entries, along with the IPv6 next hop, source and destination Layer 4 ports, source and destination MAC addresses, and source and destination VLAN IDs. |
Print
this page
Email this topic
Feedback
View PDF
Download EPUB