Date: Fri, 29 Mar 2024 13:57:41 +0100 (CET) Message-ID: <2039540336.8274.1711717061741@ubuntu-16gb-nbg1-1> Subject: Exported From Confluence MIME-Version: 1.0 Content-Type: multipart/related; boundary="----=_Part_8273_2129663693.1711717061741" ------=_Part_8273_2129663693.1711717061741 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Content-Location: file:///C:/exported.html
IP flow is an unidirectional stream of IP packets of a certain network p= rotocol, traveling between two network points. IP flow provides information= about the source and destination IP address, source and desti= nation port, protocol, DSCP field, etc. within a certain period of t= ime. Within an IP flow all IP packets have identical:
IP flow accounting is a feature of a router enabling it to create IP flo= ws collection, count IP flows passing through it and to export the traffic&= nbsp;via NetFlow=C2=AE protocol. The collection itself consists of the foll= owing data:
NetFlow is a network protocol, developed by Cisco Systems, used for expo= rting collected IP flow traffic. This data is exported to a server, where i= t is collected, processed, aggregated and archived. It can then be reviewed= in a more user-friendly form. NetFlow Analyzer performs all of these funct= ions. There are numerous NetFlow protocol versions, most important of which= are versions 5 and 9. Version 5 is commonly used on most Cisco NetFlow ena= bled devices. NetFlow version 9 is the latest version, created to support a= dvanced technologies such as MPLS, IPv6, Multicast, VLANs, etc.
NetFlow data overhead is expected to be less than 0.5% of the total netw= ork traffic included in the charts. This means, for instance, that 1 Mbps u= ser traffic will produce approximately 50 kbps of additional traffic export= ed from routers to NetFlow Server.
To provide even more HDD saving while storing data for a longer period, =
our aggregation works in a way that shorter history is shown in smaller gra=
ins (more details and space consumption), whereas longer history is present=
ed in larger grains (less details and space consumption).
For the best use of monitoring and comparison, you can see the following g=
rains:
Grain Name | Grain Period | Grain Size |
---|---|---|
G1 | Previous 3 weeks | 1 min/5 min |
G2 | Previous 3 months | 30 min |
G3 | Maximum history | 3 hour |