
Integrated Traffic Monitoring ITM Process
61202880L1-29.1E Copyright © 2008 ADTRAN, Inc. 5
Traffic Flow Data Metering
The AOS product’s flow cache monitors the traffic flow information. It collects IP header information,
organizes the packets into traffic flows, and determines when traffic flows have expired and are ready for
export. Once the ITM flow cache has been notified by the network interface (observation point), it
organizes the traffic flows into flow entries and determines when the entries will be exported to the
external data collector.
Traffic Flow Data Storage
Traffic flow entries are stored in the flow cache until they expire. Entry expiration occurs in one of three
ways: (1) the configured expiration time has passed; (2) the Transmission Control Protocol (TCP)
connection between the cache and the flow collector has expired due to FINISH/RESET signaling; or
(3) critical configuration changes have been made (for example, changing the sampling rate). The default
mode of expiration is based on a configured number of minutes (default is 30 minutes) for the traffic flow
entry to be stored in the cache.
Traffic Flow Data Collection
There are a couple of options with regard to traffic flow data collection. Traffic flow data can be sent either
to an external collector, collected internally through Top Traffic, or both.
Traffic Flow Data Export to External Collector
Once the traffic flow entries have expired, they are ready for export. When exporting traffic flow data,
there are multiple types of information sent to the external flow data collector. There is data information
about each traffic flow, as well as system information about each traffic flow, and the traffic flow record
itself. The information about the traffic flow record is called a template. Templates are used to describe the
types and lengths of individual header fields within a traffic flow data record, and communicate to the
external data collector what type of information to expect in the ITM flow record. The following tables
describe the information contained in each template.
External Data Collectors provide a more detailed view of traffic flow entries, but are not
required for ITM to function. Collected data may be sent to an external collector for more
detailed information, or sent through ITM’s internal Top Traffic data collector for general
usage overviews. ITM’s Top Traffic feature is detailed on page 7 of this guide.
Table 1. Data Template Information
Ingress Data Template Egress Data Template
Source IP Address Source IP Address
Destination IP Address Destination IP Address
Transport Protocol Type Transport Protocol Type
Source Port Source Port
Destination Port Destination Port
Comentarios a estos manuales