Browse Prior Art Database

Cisco Systems NetFlow Services Export Version 9 (RFC3954)

IP.com Disclosure Number: IPCOM000032250D
Original Publication Date: 2004-Oct-01
Included in the Prior Art Database: 2004-Oct-27
Document File: 34 page(s) / 76K

Publishing Venue

Internet Society Requests For Comment (RFCs)

Related People

B. Claise: AUTHOR [+2]

Abstract

This document specifies the data export format for version 9 of Cisco Systems' NetFlow services, for use by implementations on the network elements and/or matching collector programs. The version 9 export format uses templates to provide access to observations of IP packet flows in a flexible and extensible manner. A template defines a collection of fields, with corresponding descriptions of structure and semantics.

This text was extracted from an ASCII text file.
This is the abbreviated version, containing approximately 4% of the total text.

Network Working Group                                     B. Claise, Ed.

Request for Comments: 3954                                 Cisco Systems

Category: Informational                                     October 2004

            Cisco Systems NetFlow Services Export Version 9

Status of this Memo

   This memo provides information for the Internet community.  It does

   not specify an Internet standard of any kind.  Distribution of this

   memo is unlimited.

Copyright Notice

   Copyright (C) The Internet Society (2004).

IESG Note

   This RFC documents the NetFlow services export protocol Version 9 as

   it was when submitted to the IETF as a basis for further work in the

   IPFIX WG.

   This RFC itself is not a candidate for any level of Internet

   Standard.  The IETF disclaims any knowledge of the fitness of this

   RFC for any purpose, and in particular notes that it has not had

   complete IETF review for such things as security, congestion control,

   or inappropriate interaction with deployed protocols.  The RFC Editor

   has chosen to publish this document at its discretion.

Abstract

   This document specifies the data export format for version 9 of Cisco

   Systems' NetFlow services, for use by implementations on the network

   elements and/or matching collector programs.  The version 9 export

   format uses templates to provide access to observations of IP packet

   flows in a flexible and extensible manner.  A template defines a

   collection of fields, with corresponding descriptions of structure

   and semantics.

Table of Contents

   1.   Introduction. . . . . . . . . . . . . . . . . . . . . . . . .  2

   2.   Terminology . . . . . . . . . . . . . . . . . . . . . . . . .  4

        2.1.  Terminology Summary Table . . . . . . . . . . . . . . .  6

   3.   NetFlow High-Level Picture on the Exporter. . . . . . . . . .  6

        3.1.  The NetFlow Process on the Exporter . . . . . . . . . .  6

        3.2.  Flow Expiration . . . . . . . . . . . . . . . . . . . .  7

Claise                       Informational                      [Page 1]

RFC 3954        Cisco Systems NetFlow Services Export V9    October 2004

        3.3.  Transport Protocol. . . . . . . . . . . . . . . . . . .  7

   4.   Packet Layout . . . . . . . . . . . . . . . . . . . . . . . .  8

   5.   Export Packet Format. . . . . . . . . . . . . . . . . . . . .  9

        5.1.  Header Format . . . . . . . . . . . . . . . . . . . . .  9

        5.2.  Template FlowSet Format . . . . . . . . . . . . . . . . 11

        5.3.  Data FlowSet Format . . . . . . . . . . . . . . . . . . 13

   6.   Options . . . . . . . . . . . . . . . . . . . . . . . . . . . 14

        6.1.  Option...