OpenFlow
-
Junos Traffic Vision (SRX Series Firewall and vSRX 3.0)–We now support Junos Traffic Vision (previously known as Jflow) on SRX Series Firewall. Junos Traffic Vision uses security policies and logical systems to generate flow records that capture addresses, packet counts, and byte counts. NAT44, NAT64, and NAT66 session template records include new information using J-Flow version 9 and IPFIX.
The new elements are:
IANA IPFIX ID Field Name Size (Bytes) 152 flowStartMilliseconds
32 6 tcp_flags 16 10 input_snmp 32 14 output_snmp 32 95 application_id 32 234 ingressVRFID 32 235 egressVRFID 32 Specify only the required template events and assign a predefined value (256 through 65535) for reuse.
Templates also support non-NAT firewall IPv4 and IPv6.
[See Understanding NAT Event Logging in Flow Monitoring Format on an MX Series Router or NFX250 and Junos Traffic Vision Support on MS-MIC and MS-MPC.]