AD | Application | AWS | Azure | Cloud | Database | Enterprise | Environmental | Event Log | File System | IoT | IT Service | Network/System | Infra | Performance | Protocol | SaaS | Security | Service Level | Storage | Linux | VMware | VoIP | Web | Wireless | SNMP

Crumbtrail

MonitorTools.com » Technical documentation » SNMP » MIB » Cisco » CISCO-NETFLOW-MIB » Objects

CISCO-NETFLOW-MIB.mib object view, vendor Cisco

Introduction

Most network devices and programs ship with so-called MIB files to describe the parameters and meanings (i.e.: friendly names) which are available for monitoring via SNMP.
ActiveXperts Network Monitor 2024 can import vendor-specific MIB files, so it can be used to monitor specific OID's (Object Identifiers). This way, you can monitor your devices, computers, etc. by selecting your relevant OID's by name.

ActiveXperts Network Monitor 2024 can import MIB file CISCO-NETFLOW-MIB and use it to monitor vendor specific OID's.

CISCO-NETFLOW-MIB file content

Object view of CISCO-NETFLOW-MIB:

Scalar Object
cnfCIInterfaceEntry .1.3.6.1.4.1.9.9.387.1.1.1.1
A conceptual row in the cnfCIInterfaceEntry.
cnfCICacheEntry .1.3.6.1.4.1.9.9.387.1.1.2.1
A conceptual row in the cnfCICacheEntry.
cnfEIExportInfoEntry .1.3.6.1.4.1.9.9.387.1.2.1.1
A conceptual row in the cnfEIExportInfoEntry.
cnfEIMaxCollectors .1.3.6.1.4.1.9.9.387.1.2.2
Maximum number of entries allowed in the cnfEICollectorTable for each cache type. A zero indicates export is not supported in the device. The agent should set this value during initialization, and the value for this object cannot be changed during the system's operation.
cnfEICollectorEntry .1.3.6.1.4.1.9.9.387.1.2.3.1
A conceptual row in the cnfEICollectorEntry.
cnfFeatureAccelerationEnable .1.3.6.1.4.1.9.9.387.1.3.1
Indicates whether the netflow acceleration feature is enabled on the device or not. Feature acceleration is used to accelerate a number of services, such as IP Accounting, crypto encryption and decryption, Policy-Based Routing, CASA, and RSVP.
cnfFeatureAvailableSlot .1.3.6.1.4.1.9.9.387.1.3.2
Number of Feature Available Slot
cnfFeatureActiveSlot .1.3.6.1.4.1.9.9.387.1.3.3
Number of Feature Active Slot
cnfFeatureEntry .1.3.6.1.4.1.9.9.387.1.3.4.1
A conceptual row in the cnfFeatureEntry.
cnfESSampledPacket .1.3.6.1.4.1.9.9.387.1.4.1
Number of Sampled Packet.
cnfESExportRate .1.3.6.1.4.1.9.9.387.1.4.2
Number of Bytes exported per second.
cnfESRecordsExported .1.3.6.1.4.1.9.9.387.1.4.3
Number of flow statistics records which were exported.
cnfESPktsExported .1.3.6.1.4.1.9.9.387.1.4.4
Number of packets (udp datagrams) which were exported.
cnfESPktsFailed .1.3.6.1.4.1.9.9.387.1.4.5
Number of times a flow record could not be exported because of a pak allocation failure.
cnfESPktsDropped .1.3.6.1.4.1.9.9.387.1.4.6
Number of export packets which were dropped at the time of ipwrite operation. The reasons for this failure are no FIB, adjacency failure, MTU failed, enqueue failed, IPC failed etc.
cnfPSPacketSizeDistribution .1.3.6.1.4.1.9.9.387.1.5.1
A string contain IP Packet Size Distribution statistics. Distribution grouping are following :1-32 64 96 128 160 192 224 256 288 320 352 384 416 448 480 512 544 576 1024 1536 2048 2560 3072 3584 4096 4608. Value for each group will be expressed in 2 bytes (in Network byte order) and need to divide by 1000 to get the exact value given by CLI using show ip cache flow command.
cnfPSLastClearElapsedTime .1.3.6.1.4.1.9.9.387.1.5.2
Object indicates time in millisecond since the last clearing time of protocol statistics.
cnfPSProtocolStatEntry .1.3.6.1.4.1.9.9.387.1.5.3.1
A conceptual row in the CnfPSProtocolStatEntry.
cnfTemplateOptionsFlag .1.3.6.1.4.1.9.9.387.1.6.1
Object to indicate Sub- technologies in option template.
cnfTemplateEntry .1.3.6.1.4.1.9.9.387.1.6.2.1
A conceptual row in the cnfTemplateEntry.
cnfTemplateExportInfoEntry .1.3.6.1.4.1.9.9.387.1.6.3.1
A conceptual row in the cnfTemplateExportInfoEntry.
cnfTopFlowsTimeStamp .1.3.6.1.4.1.9.9.387.1.7.1
Indicates the time when cnfTopFlowsTable was last updated.
cnfTopFlowsTopN .1.3.6.1.4.1.9.9.387.1.7.2
Maximum number of top flows to calculate. A value of 0 disables the Top Flows feature.
cnfTopFlowsAvailableFlows .1.3.6.1.4.1.9.9.387.1.7.3
The number of entries currently available in cnfTopFlowsTable.
cnfTopFlowsMatchingFlows .1.3.6.1.4.1.9.9.387.1.7.4
Total number of matching flows in the netflow cache.
cnfTopFlowsTotalFlows .1.3.6.1.4.1.9.9.387.1.7.5
Total number of flows in the netflow cache.
cnfTopFlowsSortBy .1.3.6.1.4.1.9.9.387.1.7.6
Indicates how the entries in cnfTopFLowsTable are to be sorted. A value of 'noSort' disables Top Flows.
cnfTopFlowsCacheTimeout .1.3.6.1.4.1.9.9.387.1.7.7
Top Flows Cache timeout. Top flows are cached for this length of time and not recalculated. Configure a high value to ensure the cache does not change during long queries. Setting this object (to any value) will expire the cache.
cnfTopFlowsTableEntry .1.3.6.1.4.1.9.9.387.1.7.8.1
A conceptual row in the cnfTopFlowsTable.
cnfTopFlowsMatchSrcAddressType .1.3.6.1.4.1.9.9.387.1.7.9
Source address type to match. A value of 'unknown' (ie, 0) indicates the source address is not used as a top flows match criteria, and clears the cnfTopFlowsMatchSrcAddress and cnfTopFlowsMatchSrcAddressMask configuration.
cnfTopFlowsMatchSrcAddress .1.3.6.1.4.1.9.9.387.1.7.10
Source address prefix to match.
cnfTopFlowsMatchSrcAddressMask .1.3.6.1.4.1.9.9.387.1.7.11
The length of the match source address prefix. This prefix length must be consistent with the address type specified in cnfTopFlowsMatchSrcAddressType. A length of zero only matches the all-zero address of the specified type.
cnfTopFlowsMatchDstAddressType .1.3.6.1.4.1.9.9.387.1.7.12
Destination address type to match. A value of 'unknown' (ie, 0) indicates the destination address is not used as a top flows match criteria, and clears the cnfTopFlowsMatchDstAddress and cnfTopFlowsMatchDstAddressMask configuration.
cnfTopFlowsMatchDstAddress .1.3.6.1.4.1.9.9.387.1.7.13
Destination address prefix to match.
cnfTopFlowsMatchDstAddressMask .1.3.6.1.4.1.9.9.387.1.7.14
The length of the match destination address prefix. This prefix length must be consistent with the address type specified in cnfTopFlowsMatchDstAddressType. A length of zero only matches the all-zero address of the specified type.
cnfTopFlowsMatchNhAddressType .1.3.6.1.4.1.9.9.387.1.7.15
Nexthop address type to match. A value of 'unknown' (ie, 0) indicates the nexthop address is not used as a top flows match criteria, and clears the cnfTopFlowsMatchNhAddress and cnfTopFlowsMatchNhAddressMask configuration.
cnfTopFlowsMatchNhAddress .1.3.6.1.4.1.9.9.387.1.7.16
Nexthop address prefix to match.
cnfTopFlowsMatchNhAddressMask .1.3.6.1.4.1.9.9.387.1.7.17
The length of the match nexthop address Prefix. This prefix length must be consistent with the address type specified in cnfTopFlowsMatchNhAddressType. A length of zero only matches the all-zero address of the specified type.
cnfTopFlowsMatchSrcPortLo .1.3.6.1.4.1.9.9.387.1.7.18
The minimum value that the layer-4 source port number in the flow must have in order to match. A value of -1 disables this match criteria.
cnfTopFlowsMatchSrcPortHi .1.3.6.1.4.1.9.9.387.1.7.19
The maximum value that the layer-4 source port number in the flow must have in order to match. A value of -1 disables this match criteria.
cnfTopFlowsMatchDstPortLo .1.3.6.1.4.1.9.9.387.1.7.20
The minimum value that the layer-4 destination port number in the flow must have in order to match. A value of -1 disables this match criteria.
cnfTopFlowsMatchDstPortHi .1.3.6.1.4.1.9.9.387.1.7.21
The maximum value that the layer-4 destination port number in the flow must have in order to match. A value of -1 disables this match criteria.
cnfTopFlowsMatchSrcAS .1.3.6.1.4.1.9.9.387.1.7.22
Source AS number to match. A value of -1 disables this match criteria.
cnfTopFlowsMatchDstAS .1.3.6.1.4.1.9.9.387.1.7.23
Destination AS number to match. A value of -1 disables this match criteria.
cnfTopFlowsMatchInputIf .1.3.6.1.4.1.9.9.387.1.7.24
Input interface to match. A value of 0 disables this match criteria.
cnfTopFlowsMatchOutputIf .1.3.6.1.4.1.9.9.387.1.7.25
Output interface to match. A value of 0 disables this match criteria.
cnfTopFlowsMatchTOSByte .1.3.6.1.4.1.9.9.387.1.7.26
TOS byte to match. A value of -1 disables this match criteria.
cnfTopFlowsMatchProtocol .1.3.6.1.4.1.9.9.387.1.7.27
Protocol to match. A value of -1 disables this match criteria.
cnfTopFlowsMatchSampler .1.3.6.1.4.1.9.9.387.1.7.28
Sampler name to match. Leave blank to disable this match criteria.
cnfTopFlowsMatchClass .1.3.6.1.4.1.9.9.387.1.7.29
Class name to match. Leave blank to disable this match criteria.
cnfTopFlowsMatchMinPackets .1.3.6.1.4.1.9.9.387.1.7.30
Minimum packets to match. A value of 0 disables this match criteria.
cnfTopFlowsMatchMaxPackets .1.3.6.1.4.1.9.9.387.1.7.31
Maximum packets to match. A value of 0 disables this match criteria.
cnfTopFlowsMatchMinBytes .1.3.6.1.4.1.9.9.387.1.7.32
Minimum bytes to match. A value of 0 disables this match criteria.
cnfTopFlowsMatchMaxBytes .1.3.6.1.4.1.9.9.387.1.7.33
Maximum bytes to match. A value of 0 disables this match criteria.
cnfTopFlowsMatchDirection .1.3.6.1.4.1.9.9.387.1.7.34
Flow direction to match. A value of 0 disables this match criteria.
cnfTopFlowsGenerate .1.3.6.1.4.1.9.9.387.1.7.35
A control variable used to generate the Top Flows. When this object is set to 'true', the current entries in cnfTopFlowsTable will be removed, Top Flows will be recalculated and new entries will be populated in cnfTopFlowsTable. Setting this object to 'false' has no effect. When read, this object always returns 'false'.
cnfTopFlowsReportAvailable .1.3.6.1.4.1.9.9.387.1.7.36
Indicates whether the Top Flows have been successfully generated and entries in cnfTopFlowsTable are populated.
Tabular Object
cnfCINetflowEnable .1.3.6.1.4.1.9.9.387.1.1.1.1.1
Indicates whether the netflow feature is enabled for this interface, and if so, in which directions.
cnfCICacheType .1.3.6.1.4.1.9.9.387.1.1.2.1.1
The type of netflow cache. NetFlow aggregation maintains one or more extra flow caches with different combinations of fields that determine which traditional flows are grouped together.
cnfCICacheEnable .1.3.6.1.4.1.9.9.387.1.1.2.1.2
Indicates whether netflow is enabled for this cache type.
cnfCICacheEntries .1.3.6.1.4.1.9.9.387.1.1.2.1.3
The number of entries that can be cached for this cache type. The accepted value could be limited based on the amount of memory available in the system.
cnfCIActiveFlows .1.3.6.1.4.1.9.9.387.1.1.2.1.4
Number of currently active flow entries.
cnfCIInactiveFlows .1.3.6.1.4.1.9.9.387.1.1.2.1.5
Number of available flow entries.
cnfCIActiveTimeOut .1.3.6.1.4.1.9.9.387.1.1.2.1.6
The timeout period (in minutes) for removing active flows from the cache.
cnfCIInactiveTimeOut .1.3.6.1.4.1.9.9.387.1.1.2.1.7
The timeout period (in seconds) for removing inactive flows from the cache.
cnfCIMinSourceMask .1.3.6.1.4.1.9.9.387.1.1.2.1.8
Source route's minimum configured mask bits. This is used to configure the minimum mask for Router Based Aggregation (RBA). Minimum masking capability is available only if RBA is enabled. A value of 0 indicates that this object is not applicable to this cache type.
cnfCIMinDestinationMask .1.3.6.1.4.1.9.9.387.1.1.2.1.9
Destination route's minimum configured mask bits. This is used to configure the minimum mask for Router Based Aggregation (RBA). Minimum masking capability is available only if RBA is enabled. A value of 0 indicates that this object is not applicable to this cache type.
cnfEIExportVersion .1.3.6.1.4.1.9.9.387.1.2.1.1.1
The NetFlow data export version.
cnfEIPeerAS .1.3.6.1.4.1.9.9.387.1.2.1.1.2
This object enables collection of AS numbers from a peer autonomous system. cnfEIPeerAS, cnfEIOriginAS and cnfEIBgpNextHop are interdependent.
cnfEIOriginAS .1.3.6.1.4.1.9.9.387.1.2.1.1.3
This object enables collection of AS numbers from an origin autonomous system. cnfEIPeerAS, cnfEIOriginAS and cnfEIBgpNextHop are interdependent.
cnfEIBgpNextHop .1.3.6.1.4.1.9.9.387.1.2.1.1.4
This object enables collection of BGP Next Hops. cnfEIPeerAS, cnfEIOriginAS and cnfEIBgpNextHop are interdependent.
cnfEICollectorAddressType .1.3.6.1.4.1.9.9.387.1.2.3.1.1
The type of Internet address used by this entry.
cnfEICollectorAddress .1.3.6.1.4.1.9.9.387.1.2.3.1.2
The Internet address of the collector. This is the address which the Netflow data is exported to.
cnfEICollectorPort .1.3.6.1.4.1.9.9.387.1.2.3.1.3
The transport port of the collector which the Netflow data is exported to.
cnfEICollectorStatus .1.3.6.1.4.1.9.9.387.1.2.3.1.4
This object is used to create or delete an entry in the cnfEICollectorTable. * A row may be created using the 'CreateAndGo' option. When the row is successfully created, the RowStatus would be set to 'active' by the agent. * A row may be deleted by setting the RowStatus to 'destroy'.
cnfFeatureType .1.3.6.1.4.1.9.9.387.1.3.4.1.1
Unique ID to identify feature.
cnfFeatureSlot .1.3.6.1.4.1.9.9.387.1.3.4.1.2
Feature acceleration slot number. A value of 255 indicates that the feature has not occupied any valid feature acceleration slot and is not being accelerated. Other values indicate which feature acceleration slot the feature has occupied.
cnfFeatureActive .1.3.6.1.4.1.9.9.387.1.3.4.1.3
Number of flows currently using this feature acceleration slot for acceleration.
cnfFeatureAttaches .1.3.6.1.4.1.9.9.387.1.3.4.1.4
Number of flows that have attached to this feature acceleration slot.
cnfFeatureDetaches .1.3.6.1.4.1.9.9.387.1.3.4.1.5
Number of flows that have detached from this feature acceleration slot.
cnfFeatureConfigChanges .1.3.6.1.4.1.9.9.387.1.3.4.1.6
Number of times this feature acceleration configuration has changed.
cnfPSProtocolType .1.3.6.1.4.1.9.9.387.1.5.3.1.1
This object is used as INDEX for protocol statistic table. Protocol type consists of groups based on well known ports and protocols.
cnfPSExpiredFlows .1.3.6.1.4.1.9.9.387.1.5.3.1.2
Number of flows belonging to the same protocol and port that were expired. This counter is incremented when a flow expires due to some reason like time out of flows, event based aging etc.
cnfPSPackets .1.3.6.1.4.1.9.9.387.1.5.3.1.3
Number of Packets belonging to the same protocol and port which were switched by netflow enabled interface(s). This counter contains the number of Packets switched by all netflow enabled line cards.
cnfPSBytes .1.3.6.1.4.1.9.9.387.1.5.3.1.4
Number of Bytes belonging to the same protocol and port, which were switched by netflow enabled interface(s). This counter contains the number of Packets switched by all netflow enabled line cards.
cnfPSActive .1.3.6.1.4.1.9.9.387.1.5.3.1.5
This is a summation of active time of all flows belonging to the same protocol and port in milliseconds. The time between first switched packet and last switched packet is measured as the active time of a flow.
cnfPSInactive .1.3.6.1.4.1.9.9.387.1.5.3.1.6
This is a summation of inactive time of all flows belonging to the same protocol and port in milliseconds. The time between the last switched packet and expiry of a flow is measured as the inactive time of a flow.
cnfTemplateType .1.3.6.1.4.1.9.9.387.1.6.2.1.1
Defines the structure and interpretation of fields in a data record and serves as an INDEX in this table. Version 9 has two types of Templates: Flow Templates and Option Templates.
cnfTemplateAdded .1.3.6.1.4.1.9.9.387.1.6.2.1.2
Number of templates added.
cnfTemplateActive .1.3.6.1.4.1.9.9.387.1.6.2.1.3
Number of active templates.
cnfTemplateAgerPolls .1.3.6.1.4.1.9.9.387.1.6.2.1.4
Number of template ager polls.
cnfTemplateExportVer9Enable .1.3.6.1.4.1.9.9.387.1.6.3.1.1
Object to indicate whether version 9 export is configured or not.
cnfTemplateExportVer9TplTimeout .1.3.6.1.4.1.9.9.387.1.6.3.1.2
Export template time out. Templates are resent after this time.
cnfTemplateExportVer9OptTimeout .1.3.6.1.4.1.9.9.387.1.6.3.1.3
Export option time out. Options are resent after this time.
cnfTemplateExportVer9TplRefreshRate .1.3.6.1.4.1.9.9.387.1.6.3.1.4
Template refresh rate. Templates are resent after this many packets.
cnfTemplateExportVer9OptRefreshRate .1.3.6.1.4.1.9.9.387.1.6.3.1.5
Option refresh rate. Options are resent after this many packets.
cnfTopFlowsIndex .1.3.6.1.4.1.9.9.387.1.7.8.1.1
Index to select top flows. A value of 1 selects the topmost flow.
cnfTopFlowsSrcAddressType .1.3.6.1.4.1.9.9.387.1.7.8.1.2
Type of source address.
cnfTopFlowsSrcAddress .1.3.6.1.4.1.9.9.387.1.7.8.1.3
Source address.
cnfTopFlowsSrcAddressMask .1.3.6.1.4.1.9.9.387.1.7.8.1.4
Number of bits in source address mask.
cnfTopFlowsDstAddressType .1.3.6.1.4.1.9.9.387.1.7.8.1.5
Type of destination address.
cnfTopFlowsDstAddress .1.3.6.1.4.1.9.9.387.1.7.8.1.6
Destination address.
cnfTopFlowsDstAddressMask .1.3.6.1.4.1.9.9.387.1.7.8.1.7
Number of bits in destination address mask.
cnfTopFlowsNhAddressType .1.3.6.1.4.1.9.9.387.1.7.8.1.8
The type of nexthop address.
cnfTopFlowsNhAddress .1.3.6.1.4.1.9.9.387.1.7.8.1.9
Nexthop address.
cnfTopFlowsSrcPort .1.3.6.1.4.1.9.9.387.1.7.8.1.10
Source port number.
cnfTopFlowsDstPort .1.3.6.1.4.1.9.9.387.1.7.8.1.11
Destination port number.
cnfTopFlowsSrcAS .1.3.6.1.4.1.9.9.387.1.7.8.1.12
Source AS number.
cnfTopFlowsDstAS .1.3.6.1.4.1.9.9.387.1.7.8.1.13
Destination AS number.
cnfTopFlowsInputIfIndex .1.3.6.1.4.1.9.9.387.1.7.8.1.14
Input interface index.
cnfTopFlowsOutputIfIndex .1.3.6.1.4.1.9.9.387.1.7.8.1.15
Output interface index.
cnfTopFlowsFirstSwitched .1.3.6.1.4.1.9.9.387.1.7.8.1.16
Time flow was first switched.
cnfTopFlowsLastSwitched .1.3.6.1.4.1.9.9.387.1.7.8.1.17
Time flow was last switched.
cnfTopFlowsTOS .1.3.6.1.4.1.9.9.387.1.7.8.1.18
Type of service.
cnfTopFlowsProtocol .1.3.6.1.4.1.9.9.387.1.7.8.1.19
Protocol number.
cnfTopFlowsTCPFlags .1.3.6.1.4.1.9.9.387.1.7.8.1.20
TCP flags.
cnfTopFlowsSamplerID .1.3.6.1.4.1.9.9.387.1.7.8.1.21
Netflow Sampler ID.
cnfTopFlowsClassID .1.3.6.1.4.1.9.9.387.1.7.8.1.22
Netflow Class ID.
cnfTopFlowsFlags .1.3.6.1.4.1.9.9.387.1.7.8.1.23
Flow flags.
cnfTopFlowsBytes .1.3.6.1.4.1.9.9.387.1.7.8.1.24
Number of bytes in the flow.
cnfTopFlowsPackets .1.3.6.1.4.1.9.9.387.1.7.8.1.25
Number of packets in the flow.
cnfTopFlowsVlan .1.3.6.1.4.1.9.9.387.1.7.8.1.26
The VLAN-ID of this flow.
Table
cnfCIInterfaceTable .1.3.6.1.4.1.9.9.387.1.1.1
This table provides Netflow Enable information per interface.
cnfCICacheTable .1.3.6.1.4.1.9.9.387.1.1.2
A table containing configuration and statistics per cache. Cache may be main cache or an aggregation cache.
cnfEIExportInfoTable .1.3.6.1.4.1.9.9.387.1.2.1
A table containing information about export configuration per cache type.
cnfEICollectorTable .1.3.6.1.4.1.9.9.387.1.2.3
A control table to configure the collectors that the netflow packets are exported to. The number of entries that can be configured for the cache type is limited by the value of cnfEIMaxCollectors.
cnfFeatureTable .1.3.6.1.4.1.9.9.387.1.3.4
This table provides statistical information about active features. Each feature that can be accelerated will have an entry in this table. Every row of this table indicates statistics like name, number of active attachment, config changes of a particular feature.
cnfPSProtocolStatTable .1.3.6.1.4.1.9.9.387.1.5.3
A table containing statistics per protocol. Information sorted in this table is global in nature (i.e. it's updated for all line cards where netflow is enabled) and follows the Counter64 semantics as described in RFC 2578.
cnfTemplateTable .1.3.6.1.4.1.9.9.387.1.6.2
A control table to provide statistics of version 9 Flow and Option templates.
cnfTemplateExportInfoTable .1.3.6.1.4.1.9.9.387.1.6.3
A control table providing information about version 9.
cnfTopFlowsTable .1.3.6.1.4.1.9.9.387.1.7.8
Table of flows which have accrued the highest packets or bytes. Each row in the table represents one flow from the cache.
Object Identifier
ciscoNetflowMIB .1.3.6.1.4.1.9.9.387
The Netflow MIB provides a simple and easy method to get NetFlow cache information, current NetFlow configuration and statistics. It will enable medium to small size enterprises to take advantage of NetFlow technology over SNMP at a reduced infrastructure cost. The MIB is created to provide Netflow information in these areas: 1. Cache information and configuration. 2. Export information and configuration. 3. Information about Feature Acceleration. 4. Export Statistics. 5. Protocol Statistics. 6. Version 9 Export Template information. 7. Top Flows information. Terminology used Flow A flow is defined as an unidirectional sequence of packets between a given source and destination endpoints. Network flows are highly granular; flow endpoints are identified both by IP address as well as by transport layer application port numbers. NetFlow also utilizes the IP Protocol type, Type of Service (ToS) and the input interface identifier to uniquely identify flows. Exporter A device (for example, a router) with NetFlow services enabled. The exporter monitors packets entering an observation point and creates flows out of these packets. The information from these flows are exported in the form of Flow Records to the collector. Flow Record A Flow Record provides information about an IP Flow that exists on the Exporter. The Flow Records are commonly referred to as NetFlow Services data or NetFlow data. Collector The NetFlow Collector receives Flow Records from one or more Exporters. It processes the received export packet, i.e. parses, stores the Flow Record information. The flow records may be optionally aggregated before storing into the hard disk. Template NetFlow Version 9 Export format is template based. Version 9 record format consists of a packet header followed by at least one or more template or data FlowSets. A template FlowSet (collection of one or more template) provides a description of the fields that will be present in future data FlowSets. Templates provide an extensible design to the record format, a feature that should allow future enhancements to NetFlow services without requiring concurrent changes to the basic flow-record format. One additional record type is also a part of Version 9 specification: an options template. Rather than supplying information about IP flows, options are used to supply meta-data about the NetFlow process itself. Top Flows. This feature provides a mechanism which allows the top N flows in the netflow cache to be viewed in real time. Criteria can be set to limit the feature to particular flows of interest, which can aid in DoS detection. Only the number of flows (TopN) and the sort criteria (SortBy) need be set. Top Flows is not intended as a mechanism for exporting the entire netflow cache. Egress flows. This feature provides a mechanism to identify a flow as either an ingress or an egress flow.
ciscoNetflowMIBNotifs .1.3.6.1.4.1.9.9.387.0
ciscoNetflowMIBObjects .1.3.6.1.4.1.9.9.387.1
ciscoNetflowMIBConform .1.3.6.1.4.1.9.9.387.2
cnfCacheInfo .1.3.6.1.4.1.9.9.387.1.1
cnfExportInfo .1.3.6.1.4.1.9.9.387.1.2
cnfFeatureAcceleration .1.3.6.1.4.1.9.9.387.1.3
cnfExportStatistics .1.3.6.1.4.1.9.9.387.1.4
cnfProtocolStatistics .1.3.6.1.4.1.9.9.387.1.5
cnfExportTemplate .1.3.6.1.4.1.9.9.387.1.6
cnfTopFlows .1.3.6.1.4.1.9.9.387.1.7
cnfMIBCompliances .1.3.6.1.4.1.9.9.387.2.1
cnfMIBGroups .1.3.6.1.4.1.9.9.387.2.2
Group
cnfCacheInfoGroup .1.3.6.1.4.1.9.9.387.2.2.1
A collection of objects providing information and configuration of the Netflow cache.
cnfProtocolStatGroup .1.3.6.1.4.1.9.9.387.2.2.2
A collection of objects providing statistical information of cache per protocol and port.
cnfExportInfoGroup .1.3.6.1.4.1.9.9.387.2.2.3
A collection of objects providing Export information.
cnfFeatureAccelerationGroup .1.3.6.1.4.1.9.9.387.2.2.4
A collection of objects providing Feature Acceleration information and statistics.
cnfExportStatisticsGroup .1.3.6.1.4.1.9.9.387.2.2.5
A collection of objects providing statistical information of Export.
cnfExportTemplateGroup .1.3.6.1.4.1.9.9.387.2.2.6
A collection of objects providing information about export version 9.
cnfTopFlowsGroup .1.3.6.1.4.1.9.9.387.2.2.7
A collection of objects providing information for top flows.
cnfTopFlowsDataGroup1 .1.3.6.1.4.1.9.9.387.2.2.8
A collection of objects providing information for top flows.
cnfTopFlowsDataGroup2 .1.3.6.1.4.1.9.9.387.2.2.9
A collection of objects providing additional information for Top Flows.
cnfTopFlowsVlanGroup .1.3.6.1.4.1.9.9.387.2.2.10
A collection of objects providing VLAN information about the top flows.
cnfTopFlowsControlGroup1 .1.3.6.1.4.1.9.9.387.2.2.11
A collection of objects providing the match criteria control information for Top Flows.
cnfTopFlowsControlGroup2 .1.3.6.1.4.1.9.9.387.2.2.12
A collection of objects providing the explicit control of the way top flows are generated.