[j-nsp] NetflowV9 JunOS

[kura at iij.ad.jp]

Hello,

According to Release Note, both SRC_AS and DST_AS fields are supported
in JUNOS 9.2.
http://www.juniper.net/techpubs/software/junos/junos92/rn-sw-92/changes-in-default-behavior-and-syntax.html

The following fields are sent when specifying "ipv4-template" with JUNOS
9.2R1.10.

Template (Id = 257, Count = 18)
    Template Id: 257
    Field Count: 18
    Field (1/18)
        Type: IP_SRC_ADDR (8)
        Length: 4
    Field (2/18)
        Type: IP_DST_ADDR (12)
        Length: 4
    Field (3/18)
        Type: IP_TOS (5)
        Length: 1
    Field (4/18)
        Type: PROTOCOL (4)
        Length: 1
    Field (5/18)
        Type: L4_SRC_PORT (7)
        Length: 2
    Field (6/18)
        Type: L4_DST_PORT (11)
        Length: 2
    Field (7/18)
        Type: ICMP_TYPE (32)
        Length: 2
    Field (8/18)
        Type: INPUT_SNMP (10)
        Length: 4
    Field (9/18)
        Type: SRC_MASK (9)
        Length: 1
    Field (10/18)
        Type: DST_MASK (13)
        Length: 1
    Field (11/18)
        Type: SRC_AS (16)     <<<<<
        Length: 4
    Field (12/18)
        Type: DST_AS (17)     <<<<<
        Length: 4
    Field (13/18)
        Type: TCP_FLAGS (6)
        Length: 1
    Field (14/18)
        Type: OUTPUT_SNMP (14)
        Length: 4
    Field (15/18)
        Type: BYTES (1)
        Length: 4
    Field (16/18)
        Type: PKTS (2)
        Length: 4
    Field (17/18)
        Type: FIRST_SWITCHED (22)
        Length: 4
    Field (18/18)
        Type: LAST_SWITCHED (21)
        Length: 4

Regards,
-- 
Tomohiko Kurahashi <kura at iij.ad.jp>


From: nino.ciurleo at garr.it
Date: Thu Aug 21 2008 23:11:12 JST
>
> Hi Erdem,
> where did you read about future JunOS release features?
> Today I'm starting to test NetflowV9 on a M7i and JunOS 8.5R2.10 and
> from the documentation seems that JunOS 9.2 (last one) NetflowV9
> features are the same.
> 
> 
> Only those fields are sent to my collector:
> 
>             Field (1/19)
>                 Type: MPLS_LABEL_1 (70)
>                 Length: 3
>             Field (2/19)
>                 Type: MPLS_LABEL_2 (71)
>                 Length: 3
>             Field (3/19)
>                 Type: MPLS_LABEL_3 (72)
>                 Length: 3
>             Field (4/19)
>                 Type: IP_SRC_ADDR (8)
>                 Length: 4
>             Field (5/19)
>                 Type: IP_DST_ADDR (12)
>                 Length: 4
>             Field (6/19)
>                 Type: IP_TOS (5)
>                 Length: 1
>             Field (7/19)
>                 Type: PROTOCOL (4)
>                 Length: 1
>             Field (8/19)
>                 Type: L4_SRC_PORT (7)
>                 Length: 2
>             Field (9/19)
>                 Type: L4_DST_PORT (11)
>                 Length: 2
>             Field (10/19)
>                 Type: ICMP_TYPE (32)
>                 Length: 2
>             Field (11/19)
>                 Type: SRC_MASK (9)
>                 Length: 1
>             Field (12/19)
>                 Type: DST_MASK (13)
>                 Length: 1
>             Field (13/19)
>                 Type: TCP_FLAGS (6)
>                 Length: 1
>             Field (14/19)
>                 Type: INPUT_SNMP (10)
>                 Length: 4
>             Field (15/19)
>                 Type: OUTPUT_SNMP (14)
>                 Length: 4
>             Field (16/19)
>                 Type: BYTES (1)
>                 Length: 4
>             Field (17/19)
>                 Type: PKTS (2)
>                 Length: 4
>             Field (18/19)
>                 Type: FIRST_SWITCHED (22)
>                 Length: 4
>             Field (19/19)
>                 Type: LAST_SWITCHED (21)
>                 Length: 4
> 
> 
> Tank you
> Nino
> 
> Erdem Sener ha scritto:
> > Hi Antonino,
> >
> >  JUNOS 9.5R1 is scheduled to include some enhancements to JUNOS
> > Netflow v9 support, such as gateway address (ASn information.
> >
> > I'd suggest to contact your Juniper sales rep to provide you more
> > details with regards to upcoming Netflow v9 features.
> >
> > HTH
> > Erdem
> >
> > On Wed, Aug 20, 2008 at 6:29 PM, Antonino Ciurleo <nino.ciurleo at garr.it> wrote:
> >   
> >> Hi all,
> >> Have anyone used NetflowV9 in JunOS?
> >> I'm working on Juniper routers with NetflowV5 now, but I would work on
> >> NetflowV9.
> >> Seems that JunOS support three static templates only. In this templates same
> >> new mpls fields  are added but same old NetflowV5 fields (like SRC and DST
> >> AS) are missing...
> >> Anyone know more details?
> >> Tank you
> >> Nino Ciurleo