Aggregation Rules (I) Explicit rules Triple consisting of IPFIX type field, e.g. destination IP Matching pattern, e.g. 10.10.0.0/16 Granularity modifier, keep field or discard field Implicit definition of Minimal set of IPFIX fields required in each incoming record Template for data export Special fields Special treatment of the following fields to keep semantics # packets, # bytes, # flows: aggregation by summation Timestamps: aggregation by keeping min and max |