Starting from the VAS Experts DPI version 8.0, accounting data along with the Radius protocol data can also be exported using the ipfix format. Ipfix export is configured by the following parameters in fastpcrf.conf:
ipfix_dev=em1 ipfix_udp_collectors=1.2.3.4:1500,1.2.3.5:1501 ipfix_tcp_collectors=1.2.3.6:9418
here em1 is the name of network interface used to export
ipfix_udp_collectors are the udp collectors addresses
ipfix_tcp_collectors are the tcp collectors addresses
Only "in use" collector addresses should be specified: for example, if only the UDP collector is supported then there is no need to specify the ipfix_tcp_collectors.
Шаблон:
| № | Number of bytes | Data type | IANA | Description |
|---|---|---|---|---|
| 1001 | 4 | int32 | 43823 | TIMESTAMP |
| 4001 | 4 | int32 | 43823 | AAA event type: 0 - beginning, 1 - end, 2 - update |
| 4002 | - | string | 43823 | Accounting session ID (max. length is 64 bytes) |
| 1003 | 4 | ipv4 | 43823 | IPv4 address, in case of IPv6 it is equal to 0 |
| 1103 | 16 | ipv6 | 43823 | IPv6 address, in case of IPv4 it is equal to 0 (::) |
| 1002 | - | string | 43823 | LOGIN |
| 4003 | 4 | int32 | 43823 | Connection type |
| 4004 | - | string | 43823 | Calling-Station-Id |
| 4005 | - | string | 43823 | Called-Station-Id |
| 4006 | 4 | ipv4 | 43823 | NAS-IP-Address, in case of IPv6 it is equal to 0 |
| 4106 | 16 | ipv6 | 43823 | NAS-IPv6-Address, in case of IPv4 it is equal to 0 (::) |
| 4007 | 4 | int32 | 43823 | NAS-Port |
| 4008 | 8 | int64 | 43823 | Incoming bytes number |
| 4009 | 8 | int64 | 43823 | Outcoming bytes number |
Connection types (value of the Framed-Protocol Radius attribute):
| Type | Description |
|---|---|
| 0 | Attribute is not specified |
| 1 | PPP |
| 2 | SLIP |
| 3 | AppleTalk Remote Access Protocol (ARAP) |
| 4 | Gandalf proprietary SingleLink/MultiLink protocol |
| 5 | Xylogics proprietary IPX/SLIP |
| 6 | X.75 Synchronous |
| 7 | GPRS PDP Context |
Ipfixreceiver configuration:
[InfoModel]
InfoElements = timestamp, 43823, 1001, SECONDS, True
event_type, 43823, 4001, INT32, True
acct_session_id, 43823, 4002, STRING
source_ip4, 43823, 1003, IP4ADDR, True
source_ip6, 43823, 1103, IP6ADDR
login, 43823, 1002, STRING
conn_type, 43823, 4003, INT32, True
calling_station_id,43823, 4004, STRING
called_station_id, 43823, 4005, STRING
NAS_ip4, 43823, 4006, IP4ADDR, True
NAS_ip6, 43823, 4106, IP6ADDR
NAS_port, 43823, 4007, INT32, True
input_bytes, 43823, 4008, UINT64, True
output_bytes, 43823, 4009, UINT64, True
[ExportModelFile]
Delimiter = ;
ExportElements = timestamp, seconds, %%Y-%%m-%%dT%%H:%%M:%%S
event_type
acct_session_id
source_ip4, decodeipv4
source_ip6, decodeipv6
login
conn_type
calling_station_id
called_station_id
NAS_ip4, decodeipv4
NAS_ip6, decodeipv6
NAS_port
input_bytes
output_bytes
A list of the correspondence between the Protocol and the port number in netfow5 can be found here.