cflowd Output Formats

When you implement passive flow monitoring and active flow monitoring, you should be familiar with cflowd formats and fields. cflowd version 5 is used for both active and passive flow monitoring, while cflowd version 8 is available only for active flow monitoring.

The monitoring station monitors the traffic flow and exports the data in cflowd format to an external server. The JUNOS software collects information about the following cflowd fields:

• Source and destination IP address
• Total number of bytes and packets sent
• Start and end times of the data flow
• Source and destination port numbers
• TCP flags
• IP protocol and IP type of service
• Originating AS of source and destination address
• Source and destination address prefix mask lengths

The JUNOS software does not collect information about the following cflowd fields:

• Next-hop router's IP address

Detailed descriptions of the formats are available as follows:

• cflowd Version 5 Formats and Fields
• cflowd Version 8 Formats and Fields