CBQoS Monitor (10065 / 20065)
Description
This Module reports traffic for all DSCP bits combinations (QoS). This information is provided per NetFlow exporter.
Parameters
| Parameter Name | Description | Comments |
|---|---|---|
| Data Collection Interval, sec | Module logic execution interval | min = 5 sec, max = 600 sec, default = 30 sec |
Input
NetFlow v5, v9, IPFIX, Palo Alto Networks NetFlow v9, sFlow. Required NetFlow fields.
Required NetFlow Fields
| Information Element (IE) | IE id | IE size, B | Description |
|---|---|---|---|
| octetDeltaCount | 1 | 4 or 8 | The number of octets since the previous report (if any) in incoming packets for this Flow at the Observation Point. The number of octets includes IP header(s) and IP payload. |
| packetDeltaCount | 2 | 4 or 8 | The number of incoming packets since the previous report (if any) for this Flow at the Observation Point. |
Syslog/JSON Message Fields
| Key | Field Description | Comments |
|---|---|---|
| nfc_id | Message type identifier | "nfc_id=20065" |
| exp_ip | NetFlow exporter IPv4 address | IPv4 address |
| exp_ip6 | NetFlow exporter IPv6 address | IPv6 address |
| protocol [^1] | Transport Protocol (TCP = 6, UDP = 17) | number |
| src_tos | Inbound IP type of service | number |
| dest_tos | Outbound IP type of service | number |
| packets_in | Packets received in the QoS class flows | number |
| bytes_in | Total number of Layer 3 bytes received in the QoS class flows | number |
| flow_count | Number of flows received in the QoS class flows | number |
| percent_of_total | Percent of Total (bytes) of all bytes received by the exporter | decimal, e.g. 25.444% is 25.444 |
| [flow_smpl_id] | Flow Sampler ID | number |
| t_int | Observation time interval, msec | number |
[^1] Protocol field is optional. It is reported only if there is a corresponding field in NetFlow.