NetFlow Configuration Terms and Definitions lists terms and definitions used in this NetFlow configuration discussion.
Term | Definition |
---|---|
Active Flow Timer | A timer which specifies the maximum amount of time a flow may stay active. The ongoing flow continues to be tracked as a separate flow. It is the management application‘s responsibility to join these flows for analysis/reporting purposes. |
Flow | A stream of IP packets that has not yet met an expiration criteria, in which the values of a set of key fields is the same for each packet in the stream. |
Flow Record | A capture of information pertaining to a single flow within the NetFlow Cache based upon data type values supported by the NetFlow version format/template. |
Inactive Flow Timer | A timer that determines how long a flow for which no packets are being received remains active. |
NetFlow Cache | Contains the flow records for all currently active flows. |
NetFlow Collector | An external location where a condensed and detailed history of flow information that entered each NetFlow-enabled switch or router is archived for use by the NetFlow management application. |
NetFlow Export | A transport mechanism that periodically (based upon a timer or the number of flows accumulated in the cache) sends NetFlow data from the cache to a NetFlow collector for data analysis. |
NetFlow Export Packet | A packet of flow records or version 9 templates (or both) that is periodically sent to the NetFlow collector based upon an export criteria. |
NetFlow Management Application | An Extreme Networks SIEM or third-party software application(s) installed on the NetFlow collector, with client or browser access from a PC, capable of data reduction, monitoring, analysis, and/or troubleshooting specific to the purpose you are using NetFlow. |
NetFlow Version | Primarily determines the data types supported and whether the format is fixed or in an extensible template. |