Siemens RUGGEDCOM ROX II User Manual page 765

RUGGEDCOM ROX II
CLI User Guide
2
1
3
Figure 41: NetFlow
1. NetFlow Exporter (RUGGEDCOM ROX II) 2. WAN 3. LAN 4. NetFlow Collector 5. Flow Storage 6. Analysis Console
NOTE
RUGGEDCOM ROX II supports NetFlow version 5.
CONTENTS
• Section 16.4.1.1, "Flow Records"
Section 16.4.1.1
Flow Records
A flow record, as defined by the Cisco standard, is a unidirectional sequence of packets that share the same:
• Ingress interface
• Source and destination IP address
• IP protocol
• Source and destination port for TCP and UDP
• Type of Service (ToS)
Each flow record is exported using the User Datagram Protocol (UDP), which requires each packet to include the IP
address of the target NetFlow collector and its designated UDP port.
A flow record is considered ready to export when either of the following conditions are met:
• The flow has been inactive (e.g. no new packets) for a specific period of time
• The flow has been active for longer than allowed by the configuration
• A TCP flag indicates the flow has been terminated
RUGGEDCOM ROX II includes user-configurable timers for inactive and active flows.
NOTE
RUGGEDCOM ROX II does not retain a record of flows sent. Therefore, any NetFlow packets dropped
due to congestion or packet corruption will be lost permanently.
Flow Records
Traffic Control and Classification
4
5
Chapter 16
6
719