Example
A simple information set sent via IPFIX might look like this:
Source Destination Packets ------------------------------------------ 192.168.0.201 192.168.0.1 235 192.168.0.202 192.168.0.1 42This information set would be sent in the following IPFIX message:
| Bits 0..15 | Bits 16..31 |
|---|---|
| Version = 0x000a | Message Length = 64 Bytes |
| Export Timestamp = 2005-12-31 23:59:60 | |
| Sequence Number = 0 | |
| Observation Domain ID = 12345678 | |
| Set ID = 2 (Template) | Set Length = 20 Bytes |
| Template ID = 256 | Number of Fields = 3 |
| Typ = sourceIPv4Address | Field Length = 4 Bytes |
| Typ = destinationIPv4Address | Field Length = 4 Bytes |
| Typ = packetDeltaCount | Field Length = 4 Bytes |
| Set ID = 256 (Data Set using Template 256) |
Set Length = 28 Bytes |
| Record 1, Field 1 = 192.168.0.201 | |
| Record 1, Field 2 = 192.168.0.1 | |
| Record 1, Field 3 = 235 Packets | |
| Record 2, Field 1 = 192.168.0.202 | |
| Record 2, Field 2 = 192.168.0.1 | |
| Record 2, Field 3 = 42 Packets | |
As can be seen, the message contains the IPFIX header and two IPFIX Sets: One Template Set that introduces the build-up of the Data Set used, as well as one Data Set, which contains the actual data. Because the Template Set is buffered in Collectors it will not need to be transmitted in subsequent messages.
Read more about this topic: IP Flow Information Export
Famous quotes containing the word example:
“Our intellect is not the most subtle, the most powerful, the most appropriate, instrument for revealing the truth. It is life that, little by little, example by example, permits us to see that what is most important to our heart, or to our mind, is learned not by reasoning but through other agencies. Then it is that the intellect, observing their superiority, abdicates its control to them upon reasoned grounds and agrees to become their collaborator and lackey.”
—Marcel Proust (1871–1922)