Netflow v9 template configuration

Unanswered Question
Apr 16th, 2007

Hello,

Could any one of you help me in understanding Netflow v9 template configuration.

By default Cisco Routers send a default v9 template, I am looking at adding more v9 masures into the template for seeing more network statistics,

any help is appreciated

thanks much

Manjunath

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
vmanju123 Mon, 04/23/2007 - 08:22

my question is very specific

how to add non default measures into a v9 template

thanks

Manjunath

avmabe Fri, 04/20/2007 - 10:05

The link is good, but tell me Manjunath... Why use version 9? What information can you not get from Version 5 that you need to use the more complicated V9 with less tools that can analyze the data?

royalblues Sun, 04/22/2007 - 06:18

Manjunath,

For all NetFlow export versions, the NetFlow export datagram consists of a header and a sequence of flow records. The header contains information such as sequence number, record count, and system uptime. The flow record contains flow information, such as IP addresses, ports, and routing information.

NetFlow version 9 export format is the newest NetFlow export format. The distinguishing feature of the NetFlow version 9 export format is that it is template based. Templates make the record format extensible. NetFlow version 9 export format allows future enhancements to NetFlow without requiring concurrent changes to the basic flow-record format.

The NetFlow version 9 export record format is different from the traditional NetFlow fixed format export record. In NetFlow version 9, a template describes the NetFlow data, and the flow set contains the actual data. This arrangement allows for flexible export.

The use of templates with the NetFlow version 9 export format provides several other key benefits:

?You can export almost any information from a router or switch, including Layer 2 through 7 information, routing information, IP version 6 (IPv6), IP version 4 (IPv4), multicast, and Multiprotocol Label Switching (MPLS) information. This new information allows new applications for export data and new views of network behavior.

?Third-party business partners who produce applications that provide NetFlow collector or display services for NetFlow are not required to recompile their applications each time a new NetFlow export field is added. Instead, they can use an external data file that documents the known template formats.

?New features can be added to NetFlow more quickly, without breaking current implementations.

?NetFlow is "future-proofed" against new or developing protocols, because the version 9 export format can be adapted to provide support for them and for other non-NetFlow-based approaches to data collection.

http://www.cisco.com/en/US/products/ps6922/products_feature_guide09186a00807ae990.

HTH, rate if it does

Narayan

vmanju123 Mon, 04/23/2007 - 08:20

Hi Narayan,

I know all these Stuff,

My question is very specific - I want to know how to add non default v9 measures into a V9 template for export, There are no commands Cisco specifies, But in V9 documentation there are many useful measures.

thanks

Manjunath

paitken Fri, 06/08/2007 - 12:38

Manjunath,

It's not possible for users to modify the v9 templates. Anyway, modifying the template would not make the router able to monitor the specific field that you wanted.

Rather, it's the other way around: certain configurations cause the router to monitor certain things (eg by configuring the various aggregation caches), and the exported data (and thus the templates) reflect what is configured.

In future you will be able to configure exactly the fields that you want to monitor using Flexible NetFlow: http://www.cisco.com/go/fnf

Again, the templates will reflect what fields are configured. It won't be possible to change the template, only the configured fields.

Actions

This Discussion