Collectors; Aggregation - Alcatel-Lucent 7710 SR OS Configuration Manual

Within the raw flow cache, the following characteristics are used to identify an individual flow:
•
•
•
•
•
•
•
•
•
•
The 7710 SR OS implementation allows you to enable cflowd either at the interface level or as an
action to a filter. By enabling cflowd at the interface level, all IP packets forwarded by the inter-
face are subject to cflowd analysis. By setting cflowd as an action in a filter, only packets matching
the specified filter are subject to cflowd analysis. This provides the network operator greater flexi-
bility in the types of flows that are captured.

Collectors

A collector defines the data flow for exporting sampled data from the cache. A maximum of 5
collectors can be configured. Each collector is identified by a unique IP address and UDP port
value. Each collector can only export traffic in one version type, either V5, V8, V9, or V10.
The parameters within a collector configuration can be modified or the defaults retained.
The autonomous-system-type command defines whether the autonomous system information to be
included in the flow data is based on the originating AS or external peer AS of the flow.

Aggregation

V8 aggregation allows for flow data to be aggregated into larger, less granular flows. Use
aggregation commands to specify the type of data to be collected.
The following aggregation schemes are supported:
•
7710 SR OS Router Configuration Guide
Ingress interface
Source IP address
Destination IP address
Source transport port number
Destination transport port number
IP protocol type
IP TOS byte
Virtual router id
ICMP type and code
MPLS labels
AS matrix — Flows are aggregated based on source and destination AS and ingress and
egress interface.
Cflowd
Page 483