FlowCollector IUG Index

INDEX

A

abbreviated data file (figure) 4-3

ACCEPT_PACKETS_FROM configuration parameter 5-25, 5-28

address-based filtering 3-6

aggregation definition format 4-5

aggregation schemes

: key and value fields (table) 5-11
: managing disk space 5-32

Aggregation thread attribute 5-8

AGGREGATION_DEFINITION 4-3, A-6

application statistics 3-6

ASHostMatrix aggregation scheme 5-18

ASHOSTMATRIX_BUCSIZE configuration parameter 5-25

ASMatrix aggregation scheme 5-15

ASMATRIX_BUCSIZE configuration parameter 5-25

authentication A-6

autonomous system numbers, defining 5-23

B

: Binary thread attribute 5-10

C

CallRecord aggregation scheme 5-15

CallRecord data file (example) 4-6

CALLRECORD_BUCSIZE configuration parameter 5-25

CLEANUP_INTERVAL configuration parameter 5-26

CLEANUP_JOB configuration parameter 5-26

Collector subsystem (NFCollector) 1-6

compatibility, IOS software 1-2

Compression thread attribute 5-9

configuration and control protocol C-1

configuration parameters

: saving 3-7

conventions, document viii

coordinated universal time (UTC) 4-4

core dump A-6

creating

: filters 5-6
: threads 5-8

CSV_FORMAT configuration parameter 4-4, 4-5, 5-24

customer care billing (CCB) vii

D

Daemon (NFCD)

: function 1-6
: stopping 2-12
: troubleshooting A-5

data export

: compatibility matrix 1-2
: enabling 2-10
: format 1-3
: mechanism 1-3

data file

: aggregation definition data record format 4-5
: aggregation definition keyword descriptions (table) 4-5
: default path 4-1
: descriptions 4-4
: directory structure 4-1
: format 4-3
: header format 4-4
: header keywords and descriptions (table) 4-4
: keyword 4-6
: partial 4-7
: tracking 4-8
: unusable 5-10
: values 4-6

data filenames 4-2

datagram format

: Version 1 header and flow record B-3
: Version 5 header and flow record B-4
: Version 7 header and flow record B-5
: Version 8 header and flow record B-6

DataSetPath thread attribute 4-1, 5-9, A-5

default

: data file directory structure 4-1
: directory files structure (figure) 2-9
: file hierarchy 2-9
: shell script 5-26

defining

: filters 5-6
: protocols 5-19
: threads 5-8

destination ports, defining 5-21

DestNode aggregation scheme 5-13

DESTNODE_BUCSIZE configuration parameter 5-25

DestPort aggregation scheme 5-14

destport filter type 5-6

DetailASMatrix aggregation scheme 5-16

DETAILASMATRIX_BUCSIZE configuration parameter 5-25

DetailCallRecord aggregation scheme 5-18

DETAILCALLRECORD_BUCSIZE configuration parameter 5-25

DetailDestNode aggregation scheme 5-14

DETAILDESTNODE_BUCSIZE configuration parameter 5-25

DetailHostMatrix aggregation scheme 5-15

DETAILHOSTMATRIX_BUCSIZE configuration parameter 5-25

DetailInterface aggregation scheme 5-15

DETAILINTERFACE_BUCSIZE configuration parameter 5-25

DetailSourceNode aggregation scheme 5-16

DETAILSOURCENODE_BUCSIZE configuration parameter 5-25

DEVICE_DOTTEDADDRESS configuration parameter 5-25

directory structure, default 2-9

Discarded statistic 3-7

disk space

: See managing disk space

disk space requirements 2-1

DISK_USAGE_CLEAR_THRESHOLD configuration parameter 5-26

DISK_USAGE_THRESHOLD configuration parameters 5-26

displaying

: application statistics 3-6
: defined ports and autonomous system numbers 3-4
: source IP addresses 3-6
: UDP ports 3-5

DNS, usage with UENs 5-27

dstaddr filter type 5-6

dstas filter type 5-7

dstinterface filter type 5-6

E

: enabling data export 2-10
: environment variables, setting 2-10
: error report 5-28
: etc/services file 5-21
: export datagram formats B-1

F

fdcount utility A-3

fdget utility A-3

fdplayback utility A-4

file hierarchy, default 2-9

filenames, data 4-2

filesready log file 4-8

Filter thread attribute 5-8

filtering, address-based 3-6

filters

: creating 5-6
: descriptions 5-6
: managing disk space 5-32
: types (table) 5-6

flow cache 1-3

FlowCollector application

: 2.0-compatible mode 2-2, 5-10, A-6
: architecture 1-5
: Daemon 1-6, A-5
: default file hierarchy 2-9
: device and IOS release support 1-2
: functions 1-5, 1-6
: gateway 1-6
: gateway to NDA application 1-6
: increase performance 5-2
: installation 2-2
: overview 1-1
: overview (figure) 1-4
: processes 2-11
: registered user 5-26
: running 2-11
: saving current configuration 3-7
: solving problems A-5
: starting 2-11
: statistics 3-6
: stopping 2-12
: subsystems 1-5
: user interface 1-6
: utilities A-3
: verifying operation 2-11

flows, defined 1-1

formats

: aggregation definition 4-5
: NetFlow export datagram B-1 to B-5

FTP 5-19

G

: Gateway subsystem (NFCGW) 1-6
: GMT (Greenwich Mean Time) 4-3
: GMT_FLAG A-6
: GMT_FLAG configuration parameter 5-25
: Greenwich Mean Time (GMT) 4-3

H

help menus 3-1

HostMatrix aggregation scheme 5-13

HOSTMATRIX_BUCSIZE configuration parameter 5-25

HostMatrixInterface aggregation scheme 5-18

HOSTMATRIXINTERFACE_BUCSIZE configuration parameter 5-25

HP-UX

: core dump A-6
: installation 2-6
: system requirements 2-1
: troubleshooting authentication A-6
: troubleshooting installation A-7
: Trusted System Mode A-6

I

increasing UDP socket receive buffer size 5-27

installation

: .old file 2-4, 2-6
: 2.0-compatible mode 2-2
: HP-UX 2-6
: modes 2-2
: Solaris 2-4

IOS software compatibility 1-2

IP address

: for configuration 1-4

IP packets 1-1

L

lists

: port and autonomous system numbers 3-4
: source IP addresses 3-6
: UDP port numbers 3-5

log files

: filesready 4-8
: nfc.log 2-4, 2-6, 2-7, 2-9, 3-7
: nfc_install.log 2-6, 2-9
: nfcd.log 2-7
: nfcgw.log 2-4, 2-6, 2-9

logical port

: See UDP port number

LONG_OUTPUTFILE_SUFFIX configuration parameter 5-24

M

managing disk space

: using aggregation schemes 5-32
: using filters 5-32
: using nf.resources file 5-33
: using NF_Threads 5-32

maxdsiz parameter 2-3, 2-9

MaxUsage attribute 5-10, A-6

MaxUsage thread attribute 5-10

Missed Recs (wrap) statistic 3-7

MLS (Multilayer Switching) 1-2, 2-10

Multilayer Switching (MLS) 1-2, 2-10

N

NDA (Network Data Analyzer)

: See Network Data Analyzer (NDA)

NetFlow data export

: datagram formats B-1
: description 1-3
: enabling 2-10
: routers and switches supported 1-2
: versions 1-2

NetFlow feature card (NFFC) 1-2

NetFlow FlowCollector

: See FlowCollector application

NetFlow FlowCollector user interface

: See NFUI

NetFlow services

: device and IOS release support 1-2
: overview 1-1

NetMatrix aggregation scheme 5-15

NETMATRIX_BUCSIZE configuration parameter 5-25

Network Data Analyzer (NDA)

: as recipient of UENs C-2
: link to FlowCollector 1-5

nexthop filter type 5-6

nf.resources 5-21

: configuration parameters (table) 5-24
: file 2-10, 5-3, 5-24, 5-33
: variables 2-10

NF_Thread

: managing disk space 5-32

nfc A-4

nfc.log file 2-4, 2-6, 2-7, 2-9, 3-7, A-5

nfc_bin_to_ascii utility,described A-4

nfc_clean_up_job.sh 5-26

NFC_CONFIGFILE environment variable 2-10

nfc_gunzip utility A-4

nfc_install.log file 2-6, 2-9

NFC_KNOWNDSTASNS environment variable 2-10

NFC_KNOWNDSTPORTS environment variable 2-10

NFC_KNOWNPROTOCOLS environment variable 2-10

NFC_KNOWNSRCASNS environment variable 2-10

NFC_KNOWNSRCPORTS environment variable 2-10

NFC_LOGS environment variable 2-10

NFC_USERNAME configuration parameter 5-26

NFC20_COMPATIBLE_MODE configuration parameter

: described 5-27
: directory structure issues 4-2
: installation modes 2-2
: troubleshooting A-6

NFCD

: function 1-6
: troubleshooting A-5

nfcd.config file 5-3, 5-30

nfcd.log file 2-4, 2-6, 2-7, 2-9

NFCGW 1-6

nfcollector clean command A-5

nfcollector status command A-1

nfcollector stop all command 2-12, A-5

nfcollector stop nfcd command 2-12

NFCollector subsystem 1-6

nfconfig file 3-5

nfconfig.file 3-5, 5-2, 5-4, 5-20

NFFC 1-2

nfknown.dstasns file 3-5, 5-3, 5-23

nfknown.dstports file 3-5, 5-3, 5-21

nfknown.protocols file 5-2, 5-19

nfknown.srcasns file 3-5, 5-3, 5-23

nfknown.srcports file 3-5, 5-2, 5-21, 5-22

NFUI

: default values 3-4
: function 1-6
: information displays 3-6
: main menu (figure) 3-1
: modifying FlowCollector configuration parameters 3-4
: NFUI -s command 2-11
: quitting 3-2
: starting 3-1

O

: OUTPUT_BUFFER_SIZE configuration parameter 5-26, 5-29
: OUTPUT_DOTTEDADDRESS configuration parameter 5-24

P

Packets rcvd (wrap) statistic 3-7

packets, IP 1-1

period partial 4-7

Period thread attribute 4-7, 5-8

platforms supported 2-1

Port in statistics table 3-7

Port thread attribute 5-9

ports

source and destination, defining 5-21

UDP

: default ports 9995 and 9996 5-9
: selection range 5-9

prot filter type 5-7

protocol aggregation scheme 5-14

protocol filter type 5-7

protocol filters 5-20

protocols

: defining 5-19
: descriptions 5-20, 5-22
: removing 5-19
: syntax 5-20, 5-22

publication

: audience vii
: conventions viii
: organization vii

R

: RawFlows aggregation scheme 5-13
: Records (wrap) statistic 3-7
: requirements, disk space 2-1
: resource definitions and statistics 3-4
: ROUTER_GROUPNAME configuration parameter 5-25, 5-27
: RouterAS aggregation scheme 5-16
: RouterAS flow record format (table) B-6
: ROUTERAS_BUCSIZE configuration parameter 5-25
: RouterDstPrefix aggregation scheme 5-17
: RouterDstPrefix flow record format (table) B-7
: ROUTERDSTPREFIX_BUCSIZE configuration parameter 5-25
: RouterPrefix aggregation scheme 5-18
: RouterPrefix flow record format (table) B-7
: ROUTERPREFIX_BUCSIZE configuration parameter 5-25
: RouterProtoPort aggregation scheme 5-17
: RouterProtoPort flow record format (table) B-6
: ROUTERPROTOPORT_BUCSIZE configuration parameter 5-25
: RouterSrcPrefix aggregation scheme 5-17
: RouterSrcPrefix flow record format (table) B-7
: ROUTERSRCPREFIX_BUCSIZE configuration parameter 5-25

S

saving current configuration 3-7

service and support ix

setting UNIX environment variables 2-10

show-tech command A-2

SOCKET_BUFSIZE configuration parameter 5-25, 5-27

software compatibility, IOS 1-2

Solaris

: installation 2-4
: system requirements 2-1
: troubleshooting A-7

source ports, defining 5-21

SourceNode aggregation scheme 5-13

SOURCENODE_BUCSIZE configuration parameter 5-25

SourcePort aggregation scheme 5-14

srcaddr filter type 5-6

srcas filter type 5-7

srcinterface filter type 5-6

srcport filter type 5-6

starting

: FlowCollector 2-11
: NFUI 3-1

State thread attribute 5-9

statistics

: displaying 3-6

stopping

: Daemon 2-12
: FlowCollector 2-12

system requirements 2-1

T

tar files 2-2, 2-4, 2-7

Telnet 5-19

Thread thread attribute 5-8

threads

: attributes 5-8
: command syntax 5-8
: compression levels 5-9
: creating 5-8
: maximum disk space 5-10
: variables 5-8

ToS filter type 5-7

traffic flows

: description 1-1

traffic statistics

: description 1-1
: information types 1-3

troubleshooting commands

: fdcount utility A-3
: fdget utility A-3
: fdplayback utility A-4
: nfcollector status A-1
: show-tech A-2

U

UDP

: datagram formats B-1
: default ports 9995 and 9996 5-9
: exporting NetFlow data to port 1-4
: port number configuration 1-4
: port selection range 5-9
: port thread attributes 5-9
: port troubleshooting A-5
: socket receive buffer size, increasing 5-27

UEN_RECIPIENT_LIST configuration parameter 5-27

UNIX environment variables 2-10

unrecognized autonomous system numbers 5-23

unsolicited event notification (UEN) 5-26

unusable data file 5-10

USE_SHORT_CUT_ADDRESS_AS_SOURCE_IP
5-26, 5-29

user interface

: See NFUI

user interface (NFUI) 1-6

USER_SCRIPT_LOCATION configuration parameter 5-26, 5-29

UTC (coordinated universal time ) 4-4

utilities

: fdcount A-3
: fdget A-3
: fdplayback A-4
: nfc_binary_converter 5-10
: nfc_gunzip 5-9

V

variables, nf.resources 2-10

verifying FlowCollector operation 2-11

Version 1 NetFlow export datagram

: description 1-3
: flow record format (table) B-3
: header format (table) B-3

Version 5 NetFlow export datagram

: description 1-3
: flow record format (table) B-4
: header format (table) B-4

Version 7 NetFlow export datagram

: description 1-3
: flow record format (table) B-5
: header format (table) B-5

Version 8 NetFlow export datagram

: description 1-3
: header format (table) B-6
: RouterAS flow record format (table) B-6
: RouterDstPrefix flow record format (table) B-7
: RouterPrefix flow record format (table) B-7
: RouterProtoPort flow record format (table) B-6
: RouterSrcPrefix flow record format (table) B-7

W

: workstation, disk space requirements 2-1

Table of Contents

INDEX