Aggregation Caches

Data from flow cache entries is summarized to build aggregated views or aggregation caches. Aggregation caches are created and maintained along with the main cache. Aggregation caches have their own history area where the aging aggregation cache records are collected. Aggregation caches have a set of configuration parameters: number of entries, active and inactive time out, and export destination.

Types of aggregation caches include:

• AS-Aggregates flow data based on source and destination AS, and ingress and egress interface values.
• Destination Prefix-Aggregates flow data based on the destination address, mask, destination AS, and egress interface.
• Prefix-Aggregates flow data based on source prefix, destination prefix, source mask, destination mask, source AS, destination AS, ingress interface, and egress interface.
• Protocol Port-Aggregates flow data based on protocol, source port, and destination port.
• Source Prefix-Aggregates flow data based on source address, source mask, source AS, and ingress interface.

Aggregation caches contain a subset of the fields collected in the raw flow data. For example, TCP flags, Next Hop Address, and ToS values are not maintained in any of the aggregation caches. Unlike the main cache, aggregation caches are not enabled by default.

Copyright © 2008, Juniper Networks, Inc. All rights reserved. Trademark Notice.