Tariscope 4.5.x. Administrator's guide
Chapter 4 Tariscope configuration
4.17. NetFlow / IPFIX / rFlow collector
The NetFlow / IPFIX / rFlow collector (hereinafter "Collector") is intended for collection of information about IP traffic from the data transfer devices that use the following protocols: NetFlow v.5 or v.9, IPFIX, rFlow. The Collector processes only data that can be used for billing purposes.
To configure the Collector, in the Tariscope menu, select Additional options → Integrations. The Integrations page appears as shown in Figure 4.17.1.
Figure 4.17.1
Click on the NetFlow/IPFIX/rFlow Collector button. The NetFlow/IPFIX/rFlow Collector page appears as shown in Figure 4.17.2.
Figure 4.17.2
You should configure the Collector. To do this, click on the Open settings button. The NetFlow/IPFIX/rFlow Collector page will be as shown in Figure 4.17.3.
Figure 4.17.3
In the Data collection and primary processing section of the page, you can set parameters that affect the amount of data in the Tariscope database and log files.
In the Listen ports box, type a TCP/IP port number through which the Collector will get the IP traffic data. By default: 2055. The same TCP/IP port number should be set in the data transmission device. If you want to use more than one port, enter their numbers separated by commas.
The Collector, except processing the incoming data stream and writing it to the Tariscope database, backs up the data stream into a binary file in the format in which it received data.
In the Log folder box, specify a path to folder where logs will be stored.
In the New file every list, select the required period to create a new log. There are the following options:
- Don't rotate. The data will be permanently stored in the single file if its size does not exceed the value specified in the Maximum log size box.
- Hour. A new log file will be created every hour, if its size does not exceed the value specified in the Maximum log size box.
- Day. A new log file will be created every day, if its size does not exceed the value specified in the Maximum log size box.
- Month. A new log file will be created every month, if its size does not exceed the value specified in the Maximum log size box.
Another parameter that affects the period of the creation of a new log file is its size, which is set in the Maximum log size box. When the specified size is reached, the current log file is closed and a new one is created. Enter the desired value in the box. By default: 200 MB.
To reduce the size of the log file on disk, you can use its compression. To configure the compression, in the Compression list, select an option from the following ones:
- No. The compression is not used.
- Zip. The log file is compressed into the Zip archive.
- Bzip. The log file is compressed into the Bzip archive.
- Zlib. The log file is compressed into the Zlib archive.
The Collector may use a time zone, which is installed on a computer with Tariscope, during processing the received data. For this purpose, turn on the Take into account time zone switch.
To reduce the amount of the Tariscope database with information about network traffic if there is no need for full detail, specify the required level of a data aggregation.
Turn on the Aggregate addresses to networks switch. The data is grouped to the level of IP networks specified in the Provider and rates → a particular provider → Outgoing or Incoming → IP networks. Turning this switch reduces the load on SQL Server, and therefore improves performance of Tariscope.
You can specify the aggregation to the level of IP ports. To do this, turn on the Aggregate ports switch.
You can specify the aggregation to the level of IP protocols. To do this, turn on the Aggregate protocols switch.
You can specify the aggregation for a certain time period, which is set in the Aggregate time to list. The list contains the following options:
- No. The aggregation for the time period is not applied.
- Second. It is used to aggregate data obtained in one second.
- Minute. It is used to aggregate data obtained in one minute.
- Ten minutes. It is used to aggregate data obtained in ten minutes.
- Hour. It is used to aggregate data obtained in one hour.
- Day. It is used to aggregate data obtained in one day.
To store the processed data in the Tariscope database, you should configure parameters that are specified in the Database and rating section.
In the Database save interval box, type a time period through which the processed data will be recorded in the Tariscope database. The load on the server increases with a short time period. The default value is 3000 ms.
When there is a need for rating immediately after receiving traffic data, turn on the Online cost charging switch. If the switch is off, rating can be done at any convenient time.
The Collector can write a log with varying level of detail. The level of detail is determined by the value specified in the Log level list. There are the following options:
- Status.
- Critical error.
- Error.
- Warning.
- Information.
- Advice.
- Debug.
Status is the least detailed level, and Debug is the most detailed level of logging.
To save the configuration, click on the Save icon on the toolbar.
Start and stop of the Netflow/IPFIX/rFlow collector
To start the Collector service, go to the NetFlow/IPFIX/rFlow Collector (Figure 4.17.2).
By default, the service runs the user account of LocalSystem. To change the account, turn off the Manage service switch and specify the User account and Password.
To install the service, click on the Install service button. In the Service status position the value of "Stopped" is displayed. The Install service button is replaced to the Uninstall service button and the Run service button is active.
To start the service, click on the Run service button. In the Service status position the value of "Running" is displayed. The Run service button is replaced to the Stop service button. The Uninstall service button is inactive.
After the service was started, we recommend clicking on the Open service log button or select the Service log item of the menu and make sure there are no errors. If the log contains errors, stop the service, return to the settings. After that, try to start the service.
To stop the service, click on the Stop service button. The Stop service button is replaced to the Run service button, and the Uninstall service button is active. The Service status position displays "Stopped".
To uninstall the service, click on the Uninstall service button.
