Alcatel-Lucent 7750 SR-OS, Configuration Manual

Page: 603 / 674

Cflowd
7750 SR OS Router Configuration Guide Page 603
As the entries within the aggregate matrices are aged out, they are accumulated to be sent to
the external flow collector in Version 8 format.
The sample rate and cache size are configurable values. The cache size default is 64K flow entries.
A flow terminates when one of the following conditions is met:
• When the inactive timeout period expires (default: 15 seconds). A flow is considered
terminated when no packets are seen for the flow for N seconds.
• When an active timeout expires (default: 30 seconds). Default active timeout is 30
minutes. A flow terminates according to the time duration regardless of whether or not
there are packets coming in for the flow.
• When the user executes a clear cflowd command.
• When other measures are met that apply to aggressively age flows as the cache becomes
too full (such as
overflow percent
).
Version 8
There are several different aggregate flow types including:
• AS matrix
• Destination prefix matrix
• Source prefix matrix
• Prefix matrix
• Protocol/port matrix.
V8 is an aggregated export format. As individual flows are aged out of the raw flow cache, the data
is added to the aggregate flow cache for each configured aggregate type. Each of these aggregate
flows are also aged in a manner similar to the method the active flow cache entries are aged. When
an aggregate flow is aged out, it is sent to the external collector in the V8 record format.
Version 9
The Version 9 format is a more flexible format and allows for different templates or sets of cflowd
data to be sent based on the type of traffic being sampled and the template set configured.
Version 9 is interoperable with RFC 3954, Cisco Systems NetFlow Services Export Version 9 .