NetFlow v5

See Flow Support for details on flow support in Horizon.

Netflow v5 UDP parser

The Netflow v5 UDP parser accepts packets received by a UDP listener and must forward them to a Netflow v5 adapter.

The Netflow v5 UDP parser supports protocol detection.

Facts

Class Name

org.opennms.netmgt.telemetry.protocols.netflow.parser.Netflow5UdpParser

Configuration and use

Table 1. Optional parameters for the Netflow v5 UDP parser
Parameter Description Default

maxClockSkew

The maximum delta in seconds between exporter and Minion timestamps.

0

clockSkewEventRate

Rate-limit clock skew events, in seconds.

3600

dnsLookupsEnabled

Enable or disable DNS resolution for flows.

True
The parameter maxClockSkew in your parser definition enables clock skew detection for exporters. It specifies the maximum delta in seconds between exporter and Minion timestamps. If exceeded, an alarm will be generated for the exporting device. The default value is 0, so clock skew detection is disabled. Furthermore, you can use the clockSkewEventRate parameter to rate-limit clock skew events. The default is 3600 seconds, so every hour an event will be sent.

Netflow v5 adapter

The Netflow v5 adapter handles Netflow v5 payloads received and parsed by by the Netflow v5 UDP Parser. Flows are decoded from the messages into the canonical flow format and published to the flow repository.

Facts

Class Name

org.opennms.netmgt.telemetry.protocols.netflow.adapter.netflow5.Netflow5Adapter

Configuration and use

Table 2. Required adapter-specific parameters
Parameter Description Default

applicationDataCollection

Enables data collection of bytesIn/bytesOut based on flow applications.

false

applicationThresholding

Enables thresholding based on flow applications.

false
For data collection to work properly you must also define a valid package definition inside your adapter configuration.