2024年3月30日发(作者：张廖念文)
Cflowd
In This Chapter
This chapter provides information to configure Cflowd.
Topics in this chapter include:
•Cflowd Overview on page 564
→Operation on page 565
→Cflowd Filter Matching on page 569
•
•
Cflowd Configuration Process Overview on page 570
Configuration Notes on page 571
7950 XRS Router Configuration GuidePage 563
Cflowd Overview
Cflowd Overview
Page 564
Cflowd is a tool used to sample IPv4, IPv6, MPLS, and Ethernet traffic data flows through a router.
Cflowd enables traffic sampling and analysis by ISPs and network engineers to support capacity
planning, trends analysis, and characterization of workloads in a network service provider
environment.
Cflowd is also useful for traffic engineering, network planning and analysis, network monitoring,
developing user profiles, data warehousing and mining, as well as security-related investigations.
Collected information can be viewed several ways such as in port, AS, or network matrices, and
pure flow structures. The amount of data stored depends on the cflowd configurations.
Cflowd maintains a list of data flows through a router. A flow is a uni-directional traffic stream
defined by several characteristics such as source and destination IP addresses, source and
destination ports, inbound interface, IP protocol and TOS bits.
When a router receives a packet for which it currently does not have a flow entry, a flow structure
is initialized to maintain state information regarding that flow, such as the number of bytes
exchanged, IP addresses, port numbers, AS numbers, etc. Each subsequent packet matching the
same parameters of the flow contribute to the byte and packet count of the flow until the flow is
terminated and exported to a collector for storage.
7950 XRS Router Configuration Guide
2024年3月30日发(作者：张廖念文)
Cflowd
In This Chapter
This chapter provides information to configure Cflowd.
Topics in this chapter include:
•Cflowd Overview on page 564
→Operation on page 565
→Cflowd Filter Matching on page 569
•
•
Cflowd Configuration Process Overview on page 570
Configuration Notes on page 571
7950 XRS Router Configuration GuidePage 563
Cflowd Overview
Cflowd Overview
Page 564
Cflowd is a tool used to sample IPv4, IPv6, MPLS, and Ethernet traffic data flows through a router.
Cflowd enables traffic sampling and analysis by ISPs and network engineers to support capacity
planning, trends analysis, and characterization of workloads in a network service provider
environment.
Cflowd is also useful for traffic engineering, network planning and analysis, network monitoring,
developing user profiles, data warehousing and mining, as well as security-related investigations.
Collected information can be viewed several ways such as in port, AS, or network matrices, and
pure flow structures. The amount of data stored depends on the cflowd configurations.
Cflowd maintains a list of data flows through a router. A flow is a uni-directional traffic stream
defined by several characteristics such as source and destination IP addresses, source and
destination ports, inbound interface, IP protocol and TOS bits.
When a router receives a packet for which it currently does not have a flow entry, a flow structure
is initialized to maintain state information regarding that flow, such as the number of bytes
exchanged, IP addresses, port numbers, AS numbers, etc. Each subsequent packet matching the
same parameters of the flow contribute to the byte and packet count of the flow until the flow is
terminated and exported to a collector for storage.
7950 XRS Router Configuration Guide