Terms and Definitions

NetFlow Configuration Terms and Definitions lists terms and definitions used in this NetFlow configuration discussion.

Click to expand in new window

NetFlow Configuration Terms and Definitions

Term Definition
Active Flow Timer A timer which specifies the maximum amount of time a flow may stay active. The ongoing flow continues to be tracked as a separate flow. It is the management application‘s responsibility to join these flows for analysis/reporting purposes.
Flow A stream of IP packets that has not yet met an expiration criteria, in which the values of a set of key fields is the same for each packet in the stream.
Flow Record A capture of information pertaining to a single flow within the NetFlow Cache based upon data type values supported by the NetFlow version format/template.
Inactive Flow Timer A timer that determines how long a flow for which no packets are being received remains active.
NetFlow Cache Contains the flow records for all currently active flows.
NetFlow Collector An external location where a condensed and detailed history of flow information that entered each NetFlow-enabled switch or router is archived for use by the NetFlow management application.
NetFlow Export A transport mechanism that periodically (based upon a timer or the number of flows accumulated in the cache) sends NetFlow data from the cache to a NetFlow collector for data analysis.
NetFlow Export Packet A packet of flow records or version 9 templates (or both) that is periodically sent to the NetFlow collector based upon an export criteria.
NetFlow Management Application An Extreme Networks SIEM or third-party software application(s) installed on the NetFlow collector, with client or browser access from a PC, capable of data reduction, monitoring, analysis, and/or troubleshooting specific to the purpose you are using NetFlow.
NetFlow Version Primarily determines the data types supported and whether the format is fixed or in an extensible template.