Collectors; Aggregation - Alcatel-Lucent 7450 Configuration Manual

Within the raw flow cache, the following characteristics are used to identify an individual flow:
•
•
•
•
•
•
•
•
•
•
The implementation allows you to enable cflowd either at the interface level or as an action to a
filter. By enabling cflowd at the interface level, all IP packets forwarded by the interface are sub-
ject to cflowd analysis. By setting cflowd as an action in a filter, only packets matching the speci-
fied filter are subject to cflowd analysis. This provides the network operator greater flexibility in
the types of flows that are captured.

Collectors

A collector defines how data flows should be exported from the flow cache. A maximum of 5
collectors can be configured. Each collector is identified by a unique IP address and UDP port
value. Each collector can only export traffic in one version type, either V5, V8, V9, or V10.
The parameters within a collector configuration can be modified or the defaults retained.
The autonomous-system-type command defines whether the autonomous system information to be
included in the flow data is based on the originating AS or external peer AS of the flow.

Aggregation

V8 aggregation allows for flow data to be aggregated into larger, less granular flows. Use
aggregation commands to specify the type of data to be collected. These aggregation types are only
applicable to flows being exported to a v8 collector.
The following aggregation schemes are supported:
•
7450 ESS Router Configuration Guide
Ingress interface
Source IP address
Destination IP address
Source transport port number
Destination transport port number
IP protocol type
IP TOS byte
Virtual router id
ICMP type and code
MPLS labels
AS matrix — Flows are aggregated based on source and destination AS and ingress and
egress interface.
Configuring System Management with CLI
Page 607