7 NetFlow Collection and Processing Cartridge Pack

This chapter describes how to use the Oracle Communications Offline Mediation Controller NetFlow Collection and Processing Cartridge Pack.

About the NetFlow Collection and Processing Cartridge Pack

This cartridge pack is for NetFlow collection and processing:

  • The NetFlow Collection Cartridge (CC) collects the Cisco NetFlow v1, v5, and v7 records.

  • The NetFlow Session Aggregation Processor (AP) aggregates Cisco NetFlow (V1, V5, and V7) records which have the following attributes:

    • Source IP addresses

    • Destination IP addresses

    • Source port number

    • Destination port number

    • IP protocol type

    • Day of year and hour

    Each aggregated NetFlow session record contains the above information as well as total bytes, and total packets.

The NetFlow Collection and Processing cartridge pack will aggregate, into a single record on an hourly basis, NetFlow records belonging to the same NetFlow session. The aggregated records will be output by the AP after the user-configured flush timer has expired.

Figure 7-1 displays the architecture of the solution.

Figure 7-1 Netflow Architecture

Description of Figure 7-1 follows
Description of ''Figure 7-1 Netflow Architecture''

Configuring the NetFlow CC Node

The NetFlow Collection Cartridge (CC) collects the Cisco NetFlow v1, v5, and v7 records.

Configure these options in the NetFlow tab:

Field Description
NetFlow Port Port number that NetFlow uses to report mediation data. Default is 9995.
Socket Buffer Size UDP receiving socket buffer size. Value recommended is 65 536

Configuring the NetFlow Session AP Node

The NetFlow Session Aggregation Processor (AP) aggregates Cisco NetFlow (V1, V5, and V7) records. This node uses the standard aggregation node configuration options. See Offline Mediation Controller Online Help.