From the Blogosphere
Juniper XGS 5000 IPFIX Support
It’s really NetFlow
Aug. 21, 2012 09:00 AM
I got this Google alert the other day and it caught my attention because it talked about configuring IPFIX and the link went to a pdf on Juniper XGS 5000 IPFIX Support. Apparently the Juniper Networks Security Network Protection XGS 5000, a next generation IPS now supports IPFIX but really, it’s NetFlow. I got sort of excited because I love finding out about new gear that supports NetFlow or IPFIX. I clicked on the link and in the first paragraph I read:
MESSAGE TO JUNIPER: NetFlow and IPFIX are very similar however, they are different technologies. As different as an orange is to a tangerine. The terms cannot be used interchangeably because they really are different technologies. END MESSAGE
My hunch is that what Juniper is exporting is NetFlow and not IPFIX. If they would send us a packet capture, we will look at this byte as we did for the wrongly claimed Nortel IPFIX Support. Where we pointed out that Nortel really wasn’t supporting IPFIX despite their marketing claims.
Notice above it says 00 09 (Version v9). According to the RFC, it should be 00 0a, if it was truly IPFIX.
<<< — begin paste from the RFC— >>>
RFC 5101 IPFIX Protocol Specification January 2008
Version of Flow Record format exported in this message. The value of this field is 0x000a for the current version, incrementing by one the version used in the NetFlow services export version 9 [RFC3954].
<<< — end paste — >>>
We love working with new NetFlow and IPFIX hardware but, vendors need to read up before calling something IPFIX Vs. calling it NetFlow. Here is a great post on What is IPFIX. I hope it helps. Despite the issues I found, I would like to finish this blog by saying: nice work Juniper, it is good to see you getting on the IPFIX and NetFlow bandwagon!
NOTE: Any vendor interested in exporting IPFIX should reach out to us for complementary consulting.
For a free 30 day trial of Scrutinizer, Download Now
Sign up for Advanced NetFlow Training coming to a city near you!
Latest Cloud Developer Stories
Subscribe to the World's Most Powerful Newsletters
Subscribe to Our Rss Feeds & Get Your SYS-CON News Live!
SYS-CON Featured Whitepapers
Most Read This Week