CBQoS Monitor (10065 / 20065)
Description
This Module reports traffic for all DSCP bits combinations (QoS). This information is provided per NetFlow exporter.
Parameters
| Parameter Name | Description | Comments |
|---|---|---|
| Data Collection Interval, sec | Module logic execution interval | min = 5 sec, max = 600 sec, default = 30 sec |
Input
NetFlow v5, v9, IPFIX, Palo Alto Networks NetFlow v9, sFlow. Required NetFlow fields.
Required NetFlow Fields
| Information Element (IE) | IE id | IE size, B | Description |
|---|---|---|---|
| octetDeltaCount | 1 | 4 or 8 | The number of octets since the previous report (if any) in incoming packets for this Flow at the Observation Point. The number of octets includes IP header(s) and IP payload. |
| packetDeltaCount | 2 | 4 or 8 | The number of incoming packets since the previous report (if any) for this Flow at the Observation Point. |
Syslog/JSON Message Fields
| Key | Field Description | Comments |
|---|---|---|
| nfc_id | Message type identifier | "nfc_id=20065" |
| exp_ip | NetFlow exporter IP address | <IPv4 address> |
| [protocol] (1) | Transport Protocol (TCP = 6, UDP = 17) | <number> |
| src_tos | Inbound IP type of service | <number> |
| dest_tos | Outbound IP type of service | <number> |
| packets_in | Packets received in the QoS class flows | <number> |
| bytes_in | Total number of Layer 3 bytes received in the QoS class flows | <number> |
| flow_count | Number of flows received in the QoS class flows | <number> |
| percent_of_total | Percent of Total (bytes) of all bytes received by the exporter | <decimal>, e.g. 25.444% is 25.444 |
| [flow_smpl_id] | Flow Sampler ID | <number> |
| t_int | Observation time interval, msec | <number> |
(1) Protocol field is optional. It is reported only if there is a corresponding field in NetFlow.