From NetFlow to IPFIX: The Evolution of IP Flow Information Export
This presentation was given at NANOG 41, Albuquerque, NM, October 15, 2007.
The IP Flow Information eXport (IPFIX) protocol is the upcoming IETF standard for the export of IP flow data, based on Cisco NetFlow V9. It specifies a flexible representation and protocol for transmitting IP traffic flow information over the network from routers, measurement probes or other devices to a collector for storage and analysis. In this talk we briefly describe the IPFIX protocol; the present work of the IETF IPFIX working group including current extensions and enhancements such as a bandwidth-saving encoding method, a representation for bidirectional flows, and an IPFIX-based flow file format; and the status of a variety of presently-available implementations of the protocol.