Specifications

33-5
Cisco 7600 Series Router Cisco IOS Software Configuration Guide—12.1E
78-14064-04
Chapter 33 Configuring NDE
Understanding How NDE Works
Table 33-3 NDE Version 7 Header Format
Bytes Content Description
0–1 version Netflow export format version number
2–3 count Number of flows exported in this packet (1–30)
4–7 SysUptime Current time in milliseconds since router booted
8–11 unix_secs Current seconds since 0000 UTC 1970
12–15 unix_nsecs Residual nanoseconds since 0000 UTC 1970
16–19 flow_sequence Sequence counter of total flows seen
20–24 reserved Unused (zero) bytes
Table 33-4 NDE Version 7 Flow Record Format
Bytes Content Description
Flow masks:
• X=Populated
• A=Additional field (see the “Populating Additional NDE
Fields” section on page 33-10)
Destination
Destination
Source
Destination
Source
Interface
1
Full
Full
Interface
1
0–3 srcaddr Source IP address
XXXX
4–7 dstaddr Destination IP address
XXXXX
8–11 nexthop Next hop router’s IP address
X
2
XXXX
12–13 input Ingress interface SNMP ifIndex
XX
14–15 output Egress interface SNMP ifIndex
X
2
XXXX
16–19 dPkts Packets in the flow
XXXXX
20–23 dOctets Octets (bytes) in the flow
XXXXX
24–27 First SysUptime at start of the flow
XXXXX
28–31 Last SysUptime at the time the
last packet of the flow was received
XXXXX
32–33 srcport Layer 4 source port number
or equivalent
XX
34–35 dstport Layer 4 destination port number
or equivalent
XX
36 flags flow mask in use
XXXXX
37 tcp_flags Cumulative OR of TCP flags
38 prot Layer 4 protocol
(for example, 6=TCP, 17=UDP)
XX
39 tos IP type-of-service byte
40–41 src_as Autonomous system number of the
source, either origin or peer
AAAA