![]() A data record always has a nonzero FlowSet ID greater than 255. Currently, the template record that describes flow fields has a FlowSet ID of zero and the template record that describes option fields (described below) has a FlowSet ID of 1. A template record always has a FlowSet ID in the range of 0-255. ![]() The FlowSet ID is used to distinguish template records from data records. Thus, the collector should also cache the address of the export device that produced the template ID in order to enforce uniqueness. A collector application that is receiving export packets from several devices should be aware that uniqueness is not guaranteed across export devices. Template ID is a unique number that distinguishes this template record from all other template records produced by the same export device.A collector application must cache any template records received, and then parse any data records it encounters by locating the appropriate template record within the cache. It is important to note that a template record within an export packet does not necessarily indicate the format of data records within that same packet. Template Record is used to define the format of subsequent data records that may be received in current or future export packets.Templates are used to describe the type and length of individual fields within a NetFlow data record that match a template ID. Templates greatly enhance the flexibility of the NetFlow record format, because they allow a NetFlow collector or display application to process NetFlow data without necessarily knowing the format of the data in advance. Template FlowSet is a collection of one or more template records that have been grouped together in an export packet.An export packet contains one or more FlowSets, and both template and data FlowSets can be mixed within the same export packet. ![]() There are two different types of FlowSets: template and data. A FlowSet is a generic term for a collection of records that follow the packet header in an export packet. Today topic is NetFlow v9 Template FlowSetįollowing the packet header, the FlowSet is an export packet containing information that must be parsed and interpreted by the collector device. This is a 7 part series of blogs to provide the IT professional a basic understanding of how flow technology works, specifically Cisco’s NetFlow v9, what metrics are being captured, and how they are interpreted to help you perform comprehensive network traffic monitoring. Welcome to SolarWinds NetFlow v9 Datagram Knowledge Series.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |