1-97
Cisco uBR10012 Universal Broadband Router Software Configuration Guide
OL-1520-05
Chapter 1 Overview of Cisco uBR10012 Universal Broadband Router Software
Supported Software Features for the Cisco uBR10012 Router
Netflow Version 8 Features and Format
NetFlow exports flow information in UDP datagrams in one of several formats. Version 8, a new data
export version, has been added to support data exports from aggregation caches. Version 8 allows for
export datagrams to contain a subset of the usual version 5 export data, which is valid for a particular
aggregations scheme type.
Figure 1-4
illustrates the Netflow Version 8 header format.
Figure 1-4
Version 8 Header Format
Table 3 lists definitions for terms used in the version 8 header.
12-15
input and output
Input and output interface's SNMP index.
16-19
dPkts
Packets in the flow.
20-23
dOctets
Total number of Layer 3 bytes in the flow's packets.
24-27
First
SysUptime at start of flow.
28-31
Last
SysUptime at the time the last packet of flow was received.
32-35
srcport and dstport
TCP/UDP source and destination port number or equivalent.
36-39
pad1, tcp_flags, prot,
and tos
Unused (zero) byte, Cumulative OR of TCP flags, IP protocol (for
example, 6=TCP, 17=UDP), and IP type-of-service.
40-43
src_as and dst_as
AS of the source and destination, either origin or peer.
44-47
src_mask, dst_mask,
and pad2
Source and destination address prefix mask bits, pad 2 is unused
(zero) bytes.
Table 1-9
Netflow Version 5 Flow Record Format
Bytes
Content
Description
Engine ID
Engine type
Reserved
UNIX seconds
UNIX nanoseconds
Sequence number
System uptime
Count
Version
Aggregation
Aggregation
version
26467