Aggregation

V8 aggregation allows for flow data to be aggregated into larger, less granular flows. Use aggregation commands to specify the type of data to be collected. These aggregation types are only applicable to flows being exported to a V8 collector.

The following aggregation schemes are supported:

• AS matrix

  Flows are aggregated based on source and destination AS and ingress and egress interface.

• Protocol port

  Flows are aggregated based on the IP protocol, source port number, and destination port number.

• Source prefix

  Flows are aggregated based on source prefix and mask, source AS, and ingress interface.

• Destination prefix

  Flows are aggregated based on destination prefix and mask, destination AS, and egress interface.

• Source-destination prefix

  Flows are aggregated based on source prefix and mask, destination prefix and mask, source and destination AS, ingress interface and egress interface.

• Raw

  Flows are not aggregated and are sent to the collector in a V5 record.