[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [IPFIX] Cache configuration issues
Hi Andreas,
Andreas Bourges wrote:
> On Monday 08 September 2008, Gerhard Muenz wrote:
>> we would need to configure a second Cache without port fields. In addition,
>> we need a packet filter in front of the ICMP Cache in order to avoid
>> that TCP/UDP packets are accounted as well.
>
> Have you ever thought of daisy-chaining flow-cache processing? [...] If the flow
> does not match the first cache, try the second cache and so on...
Yes, this is discussed in draft-dressler-ipfix-aggregation, more
specifically in:
Section 6.2. ("Multiple Aggregation Rules")
<http://tools.ietf.org/html/draft-dressler-ipfix-aggregation-05#page-8>
It does complicate the export of information about the aggregation
process, though.
btw (just in case you were wondering what stance the draft takes
regarding the other issue): It's currently mandating the presence of all
of a cache's configured fields:
Section 6.1 ("Single Aggregation Rule")
<http://tools.ietf.org/html/draft-dressler-ipfix-aggregation-05#page-7>
Regards,
Christoph
_______________________________________________
IPFIX mailing list
IPFIX at ietf.org
https://www.ietf.org/mailman/listinfo/ipfix