Re: [IPFIX] clarification questions

Hi Ram,

On 03/27/2013 01:40 PM, ramki Krishnan wrote:
>
> Dear IPFIX experts,
>
> From RFC 6728,
>
> 1.Section 4.3.2
>
> oIs there a way to periodically export the flows if we are using a 
> TimeoutCache or NaturalCache ?
>

Maybe I'm not understanding your question, but periodic export of flows 
is exactly what I would expect with with a TimeoutCache or 
NaturalCache.  After an activeTimeout, for example, flows are exported 
with the observed values for that inteverval (using IEs with 
deltaCounter semantics for any counters).

> 2.Suppose we want to populate the cache only with long-lived large 
> flows (see Note1  below for data model definitions)
>
> oOne way to achieve this would be to have a selection process, using a 
> unique observation domain, which filters the long-lived large flows. 
> Are any other better ways ?
>
> 3.Continuing from 3) - suppose we want to sample the other flows (not 
> the long-lived large flows)
>
> oIs there a way to not include the long-lived large flows in the 
> selection process ?
>

What are you trying to accomplish?  This feels like a catch-22 to me.  
Do you intend to sample all flows until they cross some threshold?  
Based on your description I'm not sure how you would know a flow was 
long lived until after observationInterval and/or bandwidthThreshold.

-Andrew

> Note 1:
>
> -observationInterval: The minimum time interval to observe a flow for 
> performing further processing of the flow. Unit is in seconds.
>
> -bandwidthThreshold: The minimum bandwidth of the flow during the 
> observation interval for declaring the flow a long-lived large flow. 
> Unit is in Mbps.
>
> For example, a flow which is at or above 10 Mbps (bandwidthThreshold 
> )for a time period of at least 30 seconds (observationInterval) could 
> be declared a long-lived large flow.
>
> --
>
> Thanks,
>
> Ram (aka Ramki)
>
>
>
> _______________________________________________
> IPFIX mailing list
> [email protected]
> https://www.ietf.org/mailman/listinfo/ipfix

_______________________________________________
IPFIX mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/ipfix