Table Of Contents

A - B - C - D - E - F - G - H - I - L - M - N - O - P - R - S - T - U - V - W -

INDEX

A

abbreviated data file (figure) 4-3

ACCEPT_PACKETS_FROM configuration parameter 5-25, 5-28

address-based filtering 3-6

aggregation definition format 4-5

aggregation schemes

key and value fields (table) 5-11

managing disk space 5-32

Aggregation thread attribute 5-8

AGGREGATION_DEFINITION 4-3, A-6

application statistics 3-6

ASHostMatrix aggregation scheme 5-18

ASHOSTMATRIX_BUCSIZE configuration parameter 5-25

ASMatrix aggregation scheme 5-15

ASMATRIX_BUCSIZE configuration parameter 5-25

authentication A-6

autonomous system numbers, defining 5-23

B

Binary thread attribute 5-10

C

CallRecord aggregation scheme 5-15

CallRecord data file (example) 4-6

CALLRECORD_BUCSIZE configuration parameter 5-25

CLEANUP_INTERVAL configuration parameter 5-26

CLEANUP_JOB configuration parameter 5-26

Collector subsystem (NFCollector) 1-6

compatibility, IOS software 1-2

Compression thread attribute 5-9

configuration and control protocol C-1

configuration parameters

saving 3-7

conventions, document viii

coordinated universal time (UTC) 4-4

core dump A-6

creating

filters 5-6

threads 5-8

CSV_FORMAT configuration parameter 4-4, 4-5, 5-24

customer care billing (CCB) vii

D

Daemon (NFCD)

function 1-6

stopping 2-12

troubleshooting A-5

data export

compatibility matrix 1-2

enabling 2-10

format 1-3

mechanism 1-3

data file

aggregation definition data record format 4-5

aggregation definition keyword descriptions (table) 4-5

default path 4-1

descriptions 4-4

directory structure 4-1

format 4-3

header format 4-4

header keywords and descriptions (table) 4-4

keyword 4-6

partial 4-7

tracking 4-8

unusable 5-10

values 4-6

data filenames 4-2

datagram format

Version 1 header and flow record B-3

Version 5 header and flow record B-4

Version 7 header and flow record B-5

Version 8 header and flow record B-6

DataSetPath thread attribute 4-1, 5-9, A-5

default

data file directory structure 4-1

directory files structure (figure) 2-9

file hierarchy 2-9

shell script 5-26

defining

filters 5-6

protocols 5-19

threads 5-8

destination ports, defining 5-21

DestNode aggregation scheme 5-13

DESTNODE_BUCSIZE configuration parameter 5-25

DestPort aggregation scheme 5-14

destport filter type 5-6

DetailASMatrix aggregation scheme 5-16

DETAILASMATRIX_BUCSIZE configuration parameter 5-25

DetailCallRecord aggregation scheme 5-18

DETAILCALLRECORD_BUCSIZE configuration parameter 5-25

DetailDestNode aggregation scheme 5-14

DETAILDESTNODE_BUCSIZE configuration parameter 5-25

DetailHostMatrix aggregation scheme 5-15

DETAILHOSTMATRIX_BUCSIZE configuration parameter 5-25

DetailInterface aggregation scheme 5-15

DETAILINTERFACE_BUCSIZE configuration parameter 5-25

DetailSourceNode aggregation scheme 5-16

DETAILSOURCENODE_BUCSIZE configuration parameter 5-25

DEVICE_DOTTEDADDRESS configuration parameter 5-25

directory structure, default 2-9

Discarded statistic 3-7

disk space

See managing disk space

disk space requirements 2-1

DISK_USAGE_CLEAR_THRESHOLD configuration parameter 5-26

DISK_USAGE_THRESHOLD configuration parameters 5-26

displaying

application statistics 3-6

defined ports and autonomous system numbers 3-4

source IP addresses 3-6

UDP ports 3-5

DNS, usage with UENs 5-27

dstaddr filter type 5-6

dstas filter type 5-7

dstinterface filter type 5-6

E

enabling data export 2-10

environment variables, setting 2-10

error report 5-28

etc/services file 5-21

export datagram formats B-1

F

fdcount utility A-3

fdget utility A-3

fdplayback utility A-4

file hierarchy, default 2-9

filenames, data 4-2

filesready log file 4-8

Filter thread attribute 5-8

filtering, address-based 3-6

filters

creating 5-6

descriptions 5-6

managing disk space 5-32

types (table) 5-6

flow cache 1-3

FlowCollector application

2.0-compatible mode 2-2, 5-10, A-6

architecture 1-5

Daemon 1-6, A-5

default file hierarchy 2-9

device and IOS release support 1-2

functions 1-5, 1-6

gateway 1-6

gateway to NDA application 1-6

increase performance 5-2

installation 2-2

overview 1-1

overview (figure) 1-4

processes 2-11

registered user 5-26

running 2-11

saving current configuration 3-7

solving problems A-5

starting 2-11

statistics 3-6

stopping 2-12

subsystems 1-5

user interface 1-6

utilities A-3

verifying operation 2-11

flows, defined 1-1

formats

aggregation definition 4-5

NetFlow export datagramB-1to B-5

FTP 5-19

G

Gateway subsystem (NFCGW) 1-6

GMT (Greenwich Mean Time) 4-3

GMT_FLAG A-6

GMT_FLAG configuration parameter 5-25

Greenwich Mean Time (GMT) 4-3

H

help menus 3-1

HostMatrix aggregation scheme 5-13

HOSTMATRIX_BUCSIZE configuration parameter 5-25

HostMatrixInterface aggregation scheme 5-18

HOSTMATRIXINTERFACE_BUCSIZE configuration parameter 5-25

HP-UX

core dump A-6

installation 2-6

system requirements 2-1

troubleshooting authentication A-6

troubleshooting installation A-7

Trusted System Mode A-6

I

increasing UDP socket receive buffer size 5-27

installation

.old file 2-4, 2-6

2.0-compatible mode 2-2

HP-UX 2-6

modes 2-2

Solaris 2-4

IOS software compatibility 1-2

IP address

for configuration 1-4

IP packets 1-1

L

lists

port and autonomous system numbers 3-4

source IP addresses 3-6

UDP port numbers 3-5

log files

filesready 4-8

nfc.log 2-4, 2-6, 2-7, 2-9, 3-7

nfc_install.log 2-6, 2-9

nfcd.log 2-7

nfcgw.log 2-4, 2-6, 2-9

logical port

See UDP port number

LONG_OUTPUTFILE_SUFFIX configuration parameter 5-24

M

managing disk space

using aggregation schemes 5-32

using filters 5-32

using nf.resources file 5-33

using NF_Threads 5-32

maxdsiz parameter 2-3, 2-9

MaxUsage attribute 5-10, A-6

MaxUsage thread attribute 5-10

Missed Recs (wrap) statistic 3-7

MLS (Multilayer Switching) 1-2, 2-10

Multilayer Switching (MLS) 1-2, 2-10

N

NDA (Network Data Analyzer)

See Network Data Analyzer (NDA)

NetFlow data export

datagram formats B-1

description 1-3

enabling 2-10

routers and switches supported 1-2

versions 1-2

NetFlow feature card (NFFC) 1-2

NetFlow FlowCollector

See FlowCollector application

NetFlow FlowCollector user interface

See NFUI

NetFlow services

device and IOS release support 1-2

overview 1-1

NetMatrix aggregation scheme 5-15

NETMATRIX_BUCSIZE configuration parameter 5-25

Network Data Analyzer (NDA)

as recipient of UENs C-2

link to FlowCollector 1-5

nexthop filter type 5-6

nf.resources 5-21

configuration parameters (table) 5-24

file 2-10, 5-3, 5-24, 5-33

variables 2-10

NF_Thread

managing disk space 5-32

nfc A-4

nfc.log file 2-4, 2-6, 2-7, 2-9, 3-7, A-5

nfc_bin_to_ascii utility,described A-4

nfc_clean_up_job.sh 5-26

NFC_CONFIGFILE environment variable 2-10

nfc_gunzip utility A-4

nfc_install.log file 2-6, 2-9

NFC_KNOWNDSTASNS environment variable 2-10

NFC_KNOWNDSTPORTS environment variable 2-10

NFC_KNOWNPROTOCOLS environment variable 2-10

NFC_KNOWNSRCASNS environment variable 2-10

NFC_KNOWNSRCPORTS environment variable 2-10

NFC_LOGS environment variable 2-10

NFC_USERNAME configuration parameter 5-26

NFC20_COMPATIBLE_MODE configuration parameter

described 5-27

directory structure issues 4-2

installation modes 2-2

troubleshooting A-6

NFCD

function 1-6

troubleshooting A-5

nfcd.config file 5-3, 5-30

nfcd.log file 2-4, 2-6, 2-7, 2-9

NFCGW 1-6

nfcollector clean command A-5

nfcollector status command A-1

nfcollector stop all command 2-12, A-5

nfcollector stop nfcd command 2-12

NFCollector subsystem 1-6

nfconfig file 3-5

nfconfig.file 3-5, 5-2, 5-4, 5-20

NFFC 1-2

nfknown.dstasns file 3-5, 5-3, 5-23

nfknown.dstports file 3-5, 5-3, 5-21

nfknown.protocols file 5-2, 5-19

nfknown.srcasns file 3-5, 5-3, 5-23

nfknown.srcports file 3-5, 5-2, 5-21, 5-22

NFUI

default values 3-4

function 1-6

information displays 3-6

main menu (figure) 3-1

modifying FlowCollector configuration parameters 3-4

NFUI -s command 2-11

quitting 3-2

starting 3-1

O

OUTPUT_BUFFER_SIZE configuration parameter 5-26, 5-29

OUTPUT_DOTTEDADDRESS configuration parameter 5-24

P

Packets rcvd (wrap) statistic 3-7

packets, IP 1-1

period partial 4-7

Period thread attribute 4-7, 5-8

platforms supported 2-1

Port in statistics table 3-7

Port thread attribute 5-9

ports

source and destination, defining 5-21

UDP

default ports 9995 and 9996 5-9

selection range 5-9

prot filter type 5-7

protocol aggregation scheme 5-14

protocol filter type 5-7

protocol filters 5-20

protocols

defining 5-19

descriptions 5-20, 5-22

removing 5-19

syntax 5-20, 5-22

publication

audience vii

conventions viii

organization vii

R

RawFlows aggregation scheme 5-13

Records (wrap) statistic 3-7

requirements, disk space 2-1

resource definitions and statistics 3-4

ROUTER_GROUPNAME configuration parameter 5-25, 5-27

RouterAS aggregation scheme 5-16

RouterAS flow record format (table) B-6

ROUTERAS_BUCSIZE configuration parameter 5-25

RouterDstPrefix aggregation scheme 5-17

RouterDstPrefix flow record format (table) B-7

ROUTERDSTPREFIX_BUCSIZE configuration parameter 5-25

RouterPrefix aggregation scheme 5-18

RouterPrefix flow record format (table) B-7

ROUTERPREFIX_BUCSIZE configuration parameter 5-25

RouterProtoPort aggregation scheme 5-17

RouterProtoPort flow record format (table) B-6

ROUTERPROTOPORT_BUCSIZE configuration parameter 5-25

RouterSrcPrefix aggregation scheme 5-17

RouterSrcPrefix flow record format (table) B-7

ROUTERSRCPREFIX_BUCSIZE configuration parameter 5-25

S

saving current configuration 3-7

service and support ix

setting UNIX environment variables 2-10

show-tech command A-2

SOCKET_BUFSIZE configuration parameter 5-25, 5-27

software compatibility, IOS 1-2

Solaris

installation 2-4

system requirements 2-1

troubleshooting A-7

source ports, defining 5-21

SourceNode aggregation scheme 5-13

SOURCENODE_BUCSIZE configuration parameter 5-25

SourcePort aggregation scheme 5-14

srcaddr filter type 5-6

srcas filter type 5-7

srcinterface filter type 5-6

srcport filter type 5-6

starting

FlowCollector 2-11

NFUI 3-1

State thread attribute 5-9

statistics

displaying 3-6

stopping

Daemon 2-12

FlowCollector 2-12

system requirements 2-1

T

tar files 2-2, 2-4, 2-7

Telnet 5-19

Thread thread attribute 5-8

threads

attributes 5-8

command syntax 5-8

compression levels 5-9

creating 5-8

maximum disk space 5-10

variables 5-8

ToS filter type 5-7

traffic flows

description 1-1

traffic statistics

description 1-1

information types 1-3

troubleshooting commands

fdcount utility A-3

fdget utility A-3

fdplayback utility A-4

nfcollector status A-1

show-tech A-2

U

UDP

datagram formats B-1

default ports 9995 and 9996 5-9

exporting NetFlow data to port 1-4

port number configuration 1-4

port selection range 5-9

port thread attributes 5-9

port troubleshooting A-5

socket receive buffer size, increasing 5-27

UEN_RECIPIENT_LIST configuration parameter 5-27

UNIX environment variables 2-10

unrecognized autonomous system numbers 5-23

unsolicited event notification (UEN) 5-26

unusable data file 5-10

USE_SHORT_CUT_ADDRESS_AS_SOURCE_IP
5-26, 5-29

user interface

See NFUI

user interface (NFUI) 1-6

USER_SCRIPT_LOCATION configuration parameter 5-26, 5-29

UTC (coordinated universal time ) 4-4

utilities

fdcount A-3

fdget A-3

fdplayback A-4

nfc_binary_converter 5-10

nfc_gunzip 5-9

V

variables, nf.resources 2-10

verifying FlowCollector operation 2-11

Version 1 NetFlow export datagram

description 1-3

flow record format (table) B-3

header format (table) B-3

Version 5 NetFlow export datagram

description 1-3

flow record format (table) B-4

header format (table) B-4

Version 7 NetFlow export datagram

description 1-3

flow record format (table) B-5

header format (table) B-5

Version 8 NetFlow export datagram

description 1-3

header format (table) B-6

RouterAS flow record format (table) B-6

RouterDstPrefix flow record format (table) B-7

RouterPrefix flow record format (table) B-7

RouterProtoPort flow record format (table) B-6

RouterSrcPrefix flow record format (table) B-7

W

workstation, disk space requirements 2-1