Cisco uBR10012 Software Configuration Manual page 117

Chapter 1 Overview of Cisco uBR10012 Universal Broadband Router Software
Table 1-9
Bytes
12-15
16-19
20-23
24-27
28-31
32-35
36-39
40-43
44-47
Netflow Version 8 Features and Format
NetFlow exports flow information in UDP datagrams in one of several formats. Version 8, a new data
export version, has been added to support data exports from aggregation caches. Version 8 allows for
export datagrams to contain a subset of the usual version 5 export data, which is valid for a particular
aggregations scheme type.
Figure 1-4
Figure 1-4
Table 3 lists definitions for terms used in the version 8 header.
OL-1520-05
Netflow Version 5 Flow Record Format
Content
input and output
dPkts
dOctets
First
Last
srcport and dstport
pad1, tcp_flags, prot,
and tos
src_as and dst_as
src_mask, dst_mask,
and pad2
illustrates the Netflow Version 8 header format.
Version 8 Header Format
Version
Engine type Engine ID
Cisco uBR10012 Universal Broadband Router Software Configuration Guide
Supported Software Features for the Cisco uBR10012 Router
Description
Input and output interface's SNMP index.
Packets in the flow.
Total number of Layer 3 bytes in the flow's packets.
SysUptime at start of flow.
SysUptime at the time the last packet of flow was received.
TCP/UDP source and destination port number or equivalent.
Unused (zero) byte, Cumulative OR of TCP flags, IP protocol (for
example, 6=TCP, 17=UDP), and IP type-of-service.
AS of the source and destination, either origin or peer.
Source and destination address prefix mask bits, pad 2 is unused
(zero) bytes.
System uptime
UNIX seconds
UNIX nanoseconds
Sequence number
Aggregation
Reserved
Count
Aggregation
version
1-97