Skip to content

Conversation

@jabersmith
Copy link

Both ipfix and netflow v9 define template IDs as being unique only within an Observation Domain, indicated by the message's Source ID or Observation Domain ID field:
https://tools.ietf.org/html/rfc7011#section-3.4.1
https://tools.ietf.org/html/rfc3954#section-5.2

Flow data received within a given Observation Domain should be interpreted only with templates received from the same Observation Domain; it's possible for different observation domains (linecards, etc) in the same device to send different template definitions with the same template ids.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant