ipfixcol2/doc/data/configs/tcp2unirec.xml at master · CESNET/ipfixcol2 · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
<!--
  Receive flow data over TCP, convert them into UniRec format and send via
  TCP TRAP communication interface (port 8000).
-->
<ipfixcol2>
  <!-- Input plugins -->
  <inputPlugins>
    <input>
      <name>TCP collector</name>
      <plugin>tcp</plugin>
      <params>
        <localPort>4739</localPort>
        <localIPAddress></localIPAddress>
      </params>
    </input>
  </inputPlugins>

  <!-- Output plugins -->
  <outputPlugins>
    <output>
      <name>UniRec output</name>
      <plugin>unirec</plugin>
      <params>
        <!-- UniRec template -->
        <uniRecFormat>TIME_FIRST,TIME_LAST,SRC_IP,DST_IP,PROTOCOL,?SRC_PORT,?DST_PORT,?TCP_FLAGS,PACKETS,BYTES</uniRecFormat>
        <splitBiflow>true</splitBiflow>
        <!-- TRAP interface configuration -->
        <trapIfcCommon>
          <timeout>HALF_WAIT</timeout>
          <buffer>true</buffer>
          <autoflush>500000</autoflush>
        </trapIfcCommon>
        <!-- TRAP interface specification -->
        <trapIfcSpec>
          <tcp>
            <port>8000</port>
            <maxClients>64</maxClients>
          </tcp>
        </trapIfcSpec>
      </params>
    </output>
  </outputPlugins>
</ipfixcol2>