View flow logs for multicast

This page describes support for multicast traffic in VPC Flow Logs.

VPC Flow Logs records a sample of packets sent from and received by virtual machine (VM) instances. Flow logs are aggregated by IP connection (5-tuple). These logs can be used for network monitoring, forensics, security analysis, and expense optimization. For more information, see the VPC Flow Logs overview.

If an instance is a multicast producer or consumer, then VPC Flow Logs records include information about the corresponding multicast domain and group range.

VPC Flow Logs records for multicast

This section describes the additional information that is included in flow logs for multicast producers and consumers. For a full list of fields in VPC Flow Logs records, see About VPC Flow Logs records.

Record format

The following table describes the fields in VPC Flow Logs records for multicast traffic.

Field	Field format	Field type: Base or optional metadata
dest_multicast_group_range	MulticastGroupDetails If the destination of the flow is a multicast group IP address and reporter of the flow is a multicast producer, then this field is populated with multicast domain and group range details.	Metadata
src_multicast_group_consumer_activation	MulticastGroupConsumerActivationDetails If the destination of the flow is a multicast group IP address and reporter of the flow is a multicast consumer, then this field is populated with multicast consumer association and group consumer activation details.	Metadata

MulticastGroupDetails field format

Field	Type	Description
project_id	string	The ID of the multicast administrator project.
location	string	The zone of the multicast producer.
name	string	The name of the multicast group range that contains the group IP address that traffic was sent to.
domain	string	The name of the multicast domain that contains the group range.

MulticastGroupConsumerActivationDetails field format

Field	Type	Description
project_id	string	The ID of the project that contains the multicast consumer VPC network.
location	string	The zone of the multicast consumer.
name	string	The name of the multicast group consumer activation that was created when the multicast consumer VPC network was activated for the group range.
domain_association	string	The name of the multicast consumer association between the multicast consumer VPC network and the domain.

View flow logs

To view flow logs, do the following:

If you haven't already, configure VPC Flow Logs. See Configure VPC Flow Logs in the VPC Flow Logs documentation.
Follow the steps to access flow logs.