1-95
Cisco uBR10012 Universal Broadband Router Software Configuration Guide
OL-1520-08
Chapter1 Overview of CiscouBR10012 Universal Broadband Router Software Supported Software Features for the CiscouBR10012 Router
Netflow Version 8 Features and Format
NetFlow exports flow information in UDP datagrams in one of several formats. Version 8, a new data
export version, has been added to support data exports from aggregation caches. Version 8 allows for
export datagrams to contain a subset of the usual version 5 export data, which is valid for a particular
aggregations scheme type.
Figure4 illustrates the Netflow Version 8 header format.
Figure4 Version 8 Header Format
Table 3 lists definitions for terms used in the version 8 header.
Table9 Netflow Version 5 Flow Record Format
Bytes Content Description
0-3 srcaddr Source IP address.
4-7 dstaddr Destination IP address.
8-11 nexthop Next hop router's IP address.
12-15 input and output Input and output interface's SNMP index.
16-19 dPkts Packets in the flow.
20-23 dOctets Total number of Layer 3 bytes in the flow's packets.
24-27 First SysUptime at start of flow.
28-31 Last SysUptime at the time the last packet of flow was received.
32-35 srcport and dstport TCP/UDP source and destination port number or equivalent.
36-39 pad1, tcp_flags, prot,
and tos Unused (zero) byte, Cumulative OR of TCP flags, IP protocol (for
example, 6=TCP, 17=UDP), and IP type-of-service.
40-43 src_as and dst_as AS of the source and destination, either origin or peer.
44-47 src_mask, dst_mask,
and pad2 Source and destination address prefix mask bits, pad 2 is unused
(zero) bytes.