Web Site

Computerit-solutions.com



» Computer » Network minutes » Topics begins with I » IPFIX


Page modified: Friday, June 23, 2006 20:28:34

Internet Protocol flow information export (IPFIX), an improvement of Cisco Systems' Netflow minutes, is developed of the IETF, in order to standardize the exchange from net monitoring information to.

A flow thereby packages of a Datentroms are called, which resembles common characteristics as e.g. "“source, a same goal and same minutes"” to exhibit. By means of IPFIX can now e.g. rout information about his view of current net extent of utilization to a central Monitoringstation to send, which can react to these information suitably.

IPFIX is pure Push minutes, i.e. the sending station sends IPFIX of packets on its part in regular intervals.

The composition of IPFIX packets is to a large extent released to the transmitter, since in IPFIX before the dispatch of flow information by means of so-called Templates admits the structure of the packages makes. Also the data types used in packets are freely expandable.

In addition, IPFIX preferentially as transportation minutes SCTP, the alternative use of TCP or UDP is intended.

Architecture

The architecture of a IPFIX of information flow looks typically in such a way:

                
                            
      Metering, Exporter IPFIX Collector O-------------------------->O | | Observation POINT v --- IP Traffic --> 

A Metering Process POINT packets collects, pre-filters it if necessary and aggregates information about these packages at the Observation. These information is then sent away by the Exporter to the Collector. A Many ton Many relationship between Exporter and Collector exists, i.e. a Exporter can both several Collectors supply and a Collector information from several Exportern refer.

Example

A simple, by means of IPFIX dispatched data record could look e.g. in such a way:

A goal of packages pours ----------------------------------------- 192.168.0.201 192.168.0.1 235 192.168.0.202 192.168.0.1 42 

The IPFIX message used thereby could be developed e.g. as follows:

Bit 0..15
Bit 16..31
Version = 0x000a Message length = 64 byte Export time = 2005-12-31 23:59: 60 serial-number = 0 Quellsystem ID = 12345678 Set ID = 2 (Template) Set length = 20 byte Template ID = 256 Number of fields = 3 Type = sourceIPv4Address Field length = 4 byte Type = destinationIPv4Address Field length = 4 byte Type = packing delta COUNT Field length = 8 byte Set ID = 256 (DATA set after Template 256) Set length = 24 byte Sentence 1, field 1 = 192.168.0.201 Sentence 1, field 2 = 192.168.0.1 Sentence 1, field of 3 = 235 packages Sentence 2, field 1 = 192.168.0.202 Sentence 2, field 2 = 192.168.0.1 Sentence 2, field of 3 = 42 packages

It contains two IPFIX sets after the mandatory header: A Template set, that the structure used DATA of the set admits makes and DATA a set, which transmits the actual utilizable data. The Template set is buffered thereby in the receiver and does not have to be transmitted as well so in the future no more.

Related links


Related Websites

We found here 6 related websites.

Page cached: Wednesday, July 5, 2006 14:10:59
Valid XHTML 1.0!  Valid CSS!

Page copy protected against web site content infringement by Copyscape