Cisco CNS NetFlow Collection Engine Installation and Configuration Guide, 4.0
Index

Table Of Contents

A - B - C - D - E - F - G - H - I - K - L - M - N - O - P - R - S - T - U - V - W -

Index

A

ACCEPT_PACKETS_FROM     5-39

ACCEPT_PACKETS_FROM configuration parameter     5-35

address-based filtering     3-6

Aggregation attribute     5-10

aggregation scheme

ASHostMatrix     5-22

ASPort     5-18

DestPort     5-4

DetailASMatrix     5-19

DetailCallRecord     5-23

DetailSourceNode     5-19

general data     5-5

HostMatrixInterface     5-23

InterfaceMatrix     5-26

NetMatrix     5-19

RouerSrcDst     5-25

RouterAS     5-20

RouterDestOnly     5-25

RouterDstPrefix     5-21

RouterFullFlow     5-25

RouterPrefix     5-22

RouterPrePortProtocol     5-25

RouterProtoPort     5-20

RouterSrcPrefix     5-21

RouterTosAS     5-23

RouterTosDstPrefix     5-24

RouterTosPrefix     5-24

RouterTosProtoPort     5-23

RouterTosSrcPrefix     5-24

SourceNode     5-12

aggregation schemes     5-4, 5-10, 5-12

key and value fields     5-12

aggregation task     5-4

aggregation tasks     5-2

application layer protocols     5-2

application statistics     3-1, 3-6, C-8

ASHOSTMATRIX_BUCSIZE configuration parameter     5-34

ASMatrix     5-18

ASMATRIX_BUCSIZE configuration parameter     5-34

ASPort     5-18

autonomous system number     5-14, 5-19, 5-22, 5-24

B

basic problems

recommended actions     A-5

Binary thread attribute     5-11

buffer size

UDP socket     5-38

C

CallRecord     5-18

CALLRECORD_BUCSIZE configuration parameter     5-34

CLEANUP_INTERVAL configuration parameter     5-36

CLEANUP_JOB configuration parameter     5-36

CNS/XML interface     1-7, E-1

CNS Netfllow Collector application

functions     1-4

CNS NetFlow Collection Engine

binary data file format     D-1

customizing     5-1

data aggregation example     5-4

data file format     4-1

using     3-1

CNS NetFlow Collection Engine application

communication     C-6

control     C-1

installation     2-2

message format     C-2

performance     5-2

processes     2-15

running     2-15

starting     2-15

statistics     3-6

stopping     2-16

verifying operation     2-15

CNS NetFlow Collection Engine configuration and resource files     5-2

CNS NetFlow Collection Engine configuration protocol     C-1

CNS NetFlow Collection Engine control protocol     C-1

CNS NetFlow Collection Engine directory structure     2-13

CNS NetFlow Collection Engine thread     5-4

CNS Netflow Collector Engine

overview     1-1

CNS Netflow Collector Engine application

architecture     1-5

Daemon     1-6

Device and IOS Release Support     1-2

functions     1-5, 1-6

gateway to NDA application     1-6

overview illustration     1-4

Collector subsystem (NFCollector)     1-6

commands

setup     2-11

compatibility

IOS software     1-2

Compression attribute     5-11

configuration and control messages     C-6

configuration and control protocol     C-1

configuration parameters

saving     3-7

configuration parameter settings     5-32, 6-3

CSV_FORMAT configuration parameter     5-32, 6-4

customizing CNS NetFlow Collection Engine     5-1, 5-2

D

Daemon (NFCD)     5-41

configuring     5-41

function     1-6

stopping     2-16

data export

compatibility matrix     1-2

enabling     2-14

format     1-3

mechanism     1-2

data exported     5-2

data file

compression levels     5-36

DataSetPath atribute     5-10

default

directory structure     2-13

file hierarchy     2-13

defining

autonomous system number     5-31

destination port numbers     5-29

filter     5-7

source and destination     5-31

source port numbers     5-29

threads     5-9

definitions

application layer protocols     5-2

DestNode     5-15

DestPort     5-16

DESTPORT_BUCSIZE configuration parameter     5-34

DetailASMatrix     5-19

DETAILASMATRIX_BUCSIZE configuration parameter     5-34

DETAILCALLRECORD_BUCSIZE configuration parameter     5-34

DetailDestNode     5-17

DETAILDESTNODE_BUCSIZE configuration parameter     5-34

DetailHostMatrix     5-17

DETAILHOSTMATRIX_BUCSIZE configuration parameter     5-34

DetailInterface     5-17

DETAILINTERFACE_BUCSIZE configuration parameter     5-34

DetailSourceNode     5-19

DETAILSOURCENODE_BUCSIZE configuration parameter     5-34

DEVICE_DOTTEDADDRESS configuration parameter     5-33

DISK_USAGE_CLEAR_THRESHOLD configuration parameter     5-37

DISK_USAGE_THRESHOLD configuration parameter     5-37

disk space

maximum     5-11

disk space requirements     2-1

displaying

application statistics     3-6

defined ports and autonomous system numbers     3-4

source IP addresses     3-6

UDP ports     3-5

E

enabling data export     2-14

endline     C-2

environment variable

NFC_CONFIGFILE     2-14

NFC_KNOWNDSTASNS     2-14

NFC_KNOWNDSTPORTS     2-14

NFC_KNOWNPROTOCOLS     2-14

NFC_KNOWNSRCASNS     2-14

NFC_KNOWNSRCPORTS     2-14

NFC_LOG     2-14

NFCGW_LOG     2-14

event UEN message     C-6

F

fdcount utility     A-3

fdget utility     A-3

fdplayback utility     A-4

file hierarchy     2-13

filter     5-10

creating     5-7

destport     5-7

dstaddr     5-7

dstas     5-8

dstinterface     5-8

nexthop     5-8

protocol     5-8

qualifications     5-8

srcinterface     5-8

srcport     5-7

ToS     5-8

Filter attribute     5-10

filter definition     C-7

filter types     5-7

filter values     5-7

flow cache     1-2

flows

defined     1-1

G

Gateway subsystem (NFCGW)     1-6

GET Request     C-3

GMT_FLAG configuration parameter     5-32

H

help menus     3-1

HostMatrix     5-16

HOSTMATRIX_BUCSIZE configuration parameter     5-34

HOSTMATRIXINTERFACE_BUCSIZE configuration parameter     5-34

HP-UX

system requirements     2-1

I

INCREMENTAL_FLUSHING configuration parameter     5-38

installation

.old file     2-3, 2-6, 2-9

Cisco CNS 2100 Series Intelligence Engine appliance     2-10

HP-UX     2-6

Linux platform     2-8

Solaris     2-3

INTERFACEMATRIX_BUCSIZE configuration parameter     5-34

IP address

for configuration     1-4

IP packets     1-1

K

known dstasns     C-11

known dstports     C-11

known srcports     C-10

L

list export sources     C-9

list filters     C-9

list protocols     C-10

lists

ports and autonomous system numbers     3-4

source IP addresses     3-6

UDP port numbers     3-5

list threads     C-9

log files

nfc.log     2-4, 2-5, 2-7, 2-8, 2-14, 2-16

nfc_install.log     2-6, 2-8

nfcd.log     2-16

nfcgw.log     2-4, 2-5, 2-7, 2-14

LONG_OUTPUTFILE_SUFFIX configuration parameter     5-32, 6-4

M

maxdsiz parameter     2-2, 2-6, 2-8

MaxUsage attribute     5-9, 5-11

message format     C-2

messages     C-6

Missed Recs (wrap) statistic     3-7

N

NetFlow data export

enabling     2-14

hardware supported     1-2

NetFlow feature card (NFFC)     1-2

NetFlow services

device and IOS release support     1-2

overview     1-1

NetMatrix     5-19

NETMATRIX_BUCSIZE configuration parameter     5-34

NETWORK_ORDER_BINARY_OUTPUT configuration parameter     5-38

Network Data Analyzer (NDA)

link to NCS Netflow Collector Engine     1-5

nf.resources     5-4, 5-32, 6-3

file     2-13

variables     2-13

nfc.log     2-14

nfc.log file     2-4, 2-5, 2-7, 2-8, 2-16

nfc_bin_to_ascii converter utility     A-4

NFC_CONFIGFILE     2-14

nfc_gunzip utility     A-4

nfc_install.log file     2-2, 2-6, 2-8

NFC_KNOWNDSTASNS     2-14

NFC_KNOWNDSTPORTS     2-14

NFC_KNOWNPROTOCOLS     2-14

NFC_KNOWNSRCASNS     2-14

NFC_KNOWNSRCPORTS     2-14

NFC_LOG     2-14

NFC_POOLENTRIES_FOR_FLUSH configuration parameter     5-32

NFC_POOLENTRIES configuration parameter     5-32

NFC_USERNAME configuration parameter     5-36

nfc_xml.properties file     5-4

NFC20_COMPATIBLE configuration parameter     5-37

nfccollector stop nfcd command     2-16

nfcd.config file     5-4

nfcd.log file     2-16

NFCGW     1-6

nfcgw.log     2-14

NFCGW_LOG     2-14

nfcollector clean command     2-16

nfcollector status command     A-1

nfcollector stop all command     2-16

nfcollector stop nfcd command     2-16

NFCollector subsystem     1-6

nfconfig.file     5-2

NFFC     1-2

nfknown.dstasns     2-14, 5-3, 5-31

nfknown.dstports     2-14, 5-3, 5-29

nfknown.protocols     5-2

nfknown.protocols file     5-26, 5-28

nfknown.srcasns     2-14, 5-3, 5-31

nfknown.srcports     2-14, 5-3, 5-29

nfknown.typefile file     5-4

NFUI     1-5

function     1-7

starting     3-1

NUFI

interactive features     5-2

quitting     3-2, 3-4

O

operations     5-1

OPTIONS_DATA_COLLECTION_PERIOD configuration parameter     6-4

OPTIONS_DATA_DIR configuration parameter     6-3

OPTIONS_DATA_LATEST_ONLY configuration parameter     6-4

options data directory file structure     4-2

OUTPUT_BUFFER_SIZE     5-41

OUTPUT_BUFFER_SIZE configuration parameter     5-35

OUTPUT_DOTTEDADDRESS configuration parameter     5-32

P

packets

IP     1-1

Packets rcvd (wrap) statistic     3-6

parameters

valid values     2-12

Period atribute     5-10

platforms supported     2-1

Port atribute     5-10

Protocol     5-17

PROTOCOL_BUCSIZE configuration parameter     5-34

protocol definition pairs     C-8

R

Records (wrap) statistic     3-6

Requirements

HP-UX     2-1

Linux     2-1

requirements

disk space     2-1

resource definitions and statistics     3-4

ROUTER_GROUPNAME configuration parameter     5-35

RouterAS     5-20

ROUTERAS_BUCSIZE configuration parameter     5-34

ROUTERDESTONLY_BUCSIZE configuration parameter     5-34

ROUTERDESTPREFIX_BUCSIZE configuration parameter     5-34

ROUTERFULLFLOW_BUCSIZE configuration parameter     5-34

router IP addresses

for switched export packets     5-40

ROUTERPREFIX_BUCSIZE configuration parameter     5-34

ROUTERPREPORTPROTOCOL_BUCSIZE configuration parameter     5-34

RouterProtoPort     5-20

ROUTERPROTOPROT_BUCSIZE configuration parameter     5-34

ROUTERSOURCEPREFIX_BUCSIZE configuration parameter     5-34

ROUTERSRCDST_BUCSIZE configuration parameter     5-34

RouterSrcPrefix     5-21

ROUTERTOSAS_BUCSIZE configuration parameter     5-34

ROUTERTOSDESTPREFIX_BUCSIZE configuration parameter     5-34

ROUTERTOSPREFIX_BUCSIZE configuration parameter     5-34

ROUTERTOSPROTOPROT_BUCSIZE configuration parameter     5-34

ROUTERTOSSOURCEPREFIX_BUCSIZE configuration parameter     5-34

S

SET_ERROR     C-14

SET_RESPONSE     C-14

SET commands     C-5

setup     2-11

show-tech command     A-2

SOCKET_BUFSIZE configuration parameter     5-34

Solaris

installation     2-3

requirements     2-1

source and destination port numbers     5-29

SOURCENODE_BUCSIZE configuration parameter     5-34

SourcePort     5-16

SOURCEPORT_BUFSIZE configuration parameter     5-34

starting

CNS NetFlow Collection Engine     2-15

NUFI     3-1

State atribute     5-10

statistics

displaying     3-6

stopping

CNS NetFlow Collection Engine     2-16

Daemon     2-16

subsystems

Collector     1-6

Daemon     1-6

Gateway     1-6

User Interface     1-7

system requirements     2-1

T

tar files     2-2, 2-3, 2-6, 2-9

thread

creating     5-9

state     5-10

Thread atribute     5-10

thread attributes and variables     5-9

thread definition pairs     C-7

traffic flows

description     1-1

traffic statistics

information types     1-3

U

UDP

exporting NetFlow data to port     1-4

port number configuration     1-4

UDP port number     5-10

UDP port numbers     3-5, 5-3

UDP socket     5-38

UEN_RECIPIENT_LIST configuration parameter     5-37

UNIX environment variables     2-13

unsolicited event notifications (UENs)     C-1

USE_SHORT_CUT_ADDRESS_AS_SOURCE_IP     5-40

USE_SHORT_CUT_ADDRESS_AS_SOURCE_IP configuration parameter     5-35

USER_SCRIPT_LOCATION     5-40

USER_SCRIPT_LOCATION configuration parameter     5-35

user-defined scripts     5-40

User Interface (NFUI)     1-7

V

variables     2-13

nf.resources     2-13

NFC_DIR     2-13

NFC_RESOURCEFILE     2-13

verifying CNS NetFlow Collection Engine operation     2-15

Version 1 NetFlow export datagram

description     1-3

Version 5 NetFlow export datagram

description     1-3

Version 7 NetFlow export datagram

description     1-3

Version 8 NetFlow export datagram

description     1-3

Version 9 (V9) format     B-1

Version 9 NetFlow export datagram

description     1-3

W

white spaces     C-2

workstation

disk space requirements     2-1