vermont/configs/connectionfilter.xml

73 lines
1.8 KiB
XML

<ipfixConfig xmlns="urn:ietf:params:xml:ns:ipfix-config">
<observationPoint id="1">
<observationDomainId>4711</observationDomainId>
<type>pcap</type>
<parameters>
<interface>eth1</interface>
<pcap_filter>ip</pcap_filter>
</parameters>
<next>
<meteringProcessId>1</meteringProcessId>
</next>
</observationPoint>
<meteringProcess id="1">
<packetSelection>
<connectionFilter>
<exportBytes>100</exportBytes>
<timeout>3</timeout>
<filterSize>1000</filterSize>
<hashFunctions>3</hashFunctions>
</connectionFilter>
</packetSelection>
<packetReporting>
<templateId>888</templateId>
<reportedIE>
<ieName>sourceIPv4Address</ieName>
</reportedIE>
<reportedIE>
<ieName>destinationIPv4Address</ieName>
</reportedIE>
<reportedIE>
<ieName>ipPayloadPacketSection</ieName>
<ieLength>65535</ieLength>
</reportedIE>
<reportedIE>
<ieName>protocolIdentifier</ieName>
</reportedIE>
</packetReporting>
<next>
<exportingProcessId>1</exportingProcessId>
</next>
</meteringProcess>
<exportingProcess id="1">
<ipfixPacketRestrictions>
<maxPacketSize>1500</maxPacketSize>
<maxExportDelay unit="msec">500</maxExportDelay>
</ipfixPacketRestrictions>
<udpTemplateManagement>
<templateRefreshTimeout unit="sec">5</templateRefreshTimeout>
<templateRefreshRate>100</templateRefreshRate>
</udpTemplateManagement>
<collector>
<ipAddressType>4</ipAddressType>
<ipAddress>127.0.0.1</ipAddress>
<transportProtocol>17</transportProtocol>
<port>1500</port>
</collector>
</exportingProcess>
<vermont_main>
<poll_interval unit="msec">500</poll_interval>
<log_file>log.stat</log_file>
<log_interval unit="msec">300000</log_interval>
</vermont_main>
</ipfixConfig>