【文件属性】：
文件名称：NetFlow Export Datagram Format
文件大小：74KB
文件格式：PDF
更新时间：2016-11-07 15:10:14
NetFlow Export Datagram Format
NetFlow exports flow information in UDP datagrams in one of four formats:
• Version 1
• Version 5
• Version 7
• Version 8
The Version 1 (V1) format is the original format supported in the initial NetFlow releases. The
Version 5 (V5) format is an enhancement that adds Border Gateway Protocol (BGP) autonomous
system information and flow sequence numbers. The Version 7 (V7) format is an enhancement that
exclusively supports NetFlow with Cisco Catalyst 5000 series switches equipped with a NetFlow
feature card (NFFC). V7 is not compatible with Cisco routers. The Version 8 (V8) format is an
enhancement that adds router-based aggregation schemes. Versions 2, 3, 4, and 6 either were not
released or are not supported by FlowCollector.
In Versions 1, 5, and 7, the datagram consists of a header and one or more flow records. The first
field of the header contains the version number of the export datagram. Typically, a receiving
application that accepts any of the format versions allocates a buffer large enough for the largest
possible datagram from any of the format versions and then uses the header to determine how to
interpret the datagram. The second field in the header contains the number of records in the datagram
and should be used to search through the records.
All fields described in the format version tables are in network byte order. Table B-1 and Table B-2
describe the V1 header and flow record format, respectively. Table B-3 and Table B-4 describe the
V5 header and flow record format, respectively. Table B-5 and Table B-6 describe the V7 header and
flow record format, respectively. Table B-7 describes the V8 header format. Table B-8 describes the
V8 RouterAS flow record format. Table B-9 describes the V8 RouterProtoPort flow record.
Table B-10 describes the V8 RouterDstPrefix flow record. Table B-11 describes the RouterSrcPrefix
flow record, and Table B-12 describes the RouterPrefix flow record.