SCTP

From IPFlow Netflow Collector

SCTP (Stream Control Transmission Protocol)

You can find information on SCTP here:

• http://www.networksorcery.com/enp/protocol/sctp.htm
• http://www.sctp.org/index.html

In the future, Cisco IOS will be able to send Netflow datagrams to a collector using the SCTP protocol (an IOS EFT release already exists).

Using SCTP with IPFlow

From the collector point of view, there is no important difference between an UDP exporting router and a SCTP exporting router. Below you can find a partial example of a configuration based on SCTP:

router X0 {
    ip-address 193.51.1.238;
    snmp-community netflow;

    netflow {
        version 9;
        protocol sctp;
        receiver-port 10003;

        #show-templates yes;
        #debug-sctp yes;

        /* IPv4 Full-Flow */
        template-model ipv4_standard {
            mandatory-fields {
                ipv4-src-addr;
                ipv4-dst-addr;
            };

            excluded-fields {
                flows;   /* non aggregated flows */
            };

            rule ipv4_standard;
        };

        /* Aggregation cache: protocol-port-tos */
        template-model protocol_port_tos {
            mandatory-fields {
                flows;
                tos;
                src-port;
                dst-port;
            };

            rule protocol_port_tos;
        };

        /* Aggregation cache: source-prefix-tos */
        template-model source_prefix_tos {
            mandatory-fields {
                flows;
                tos;
                ipv4-src-addr;
                ipv4-src-mask;
            };
            rule source_prefix_tos;
        };
    };
};