...
The platform takes variety of inputs from the network and processes it to give results. These inputs can be:
- Raw Network and Metadata Stream: These can be the unprocessed inputs from the network.
- Netflows: Netflow (V5, V9 and IPfix)is a protocol for aggregating IP traffic information. With Netflow V9/IPfix, one can look into Layer 2 traffic as well. The platform leverages Netflows as one of its source inputs. Netflows enable collection of traffic flow statistics on routing devices and is completely transparent to the existing network, including end stations, application software and network devices like LAN switches. As Netflow is performed independently on each internetworking device, it should be made operational on each router in the network. CCE receives Netflows on port 9995.
...