-
Notifications
You must be signed in to change notification settings - Fork 7
/
Copy pathNetflow Field Explanations.txt
74 lines (74 loc) · 1.28 KB
/
Netflow Field Explanations.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
count
Number of flows exported in this packet (1-30)
dOctets
Total number of Layer 3 bytes in the packets of the flow
dPkts
Packets in the flow
dst_mask
destination address prefix mask bits
dstaddr
N/A
dstaddr_s
Destination IP
dstas
N/A
dstport
TCP/UDP destination port
engineid
slot number of the flow-switching engine
enginetype
type of flow-switching engine
first
SysUptime at start of flow
flowseq
sequence counter of total flows seen
id
last
SysUptime at the time the last packet of flow was received
length
nanos
Current count of nanoseconds since 0000 UTC 1970
nexthop
N/A
nexthop_s
Next hop router IP
packetid
proto
IP protocol type (for example, TCP = 6; UDP = 17)
raw_first
N/A
raw_last
N/A
raw_sampling
N/A
readerId
N/A
samplingint
samplingmode
seconds
Current count of seconds since 0000 UTC 1970
sender
IP of switch
snmpinput
SNMP Index of Input Interface
snmponput
SNMP Index of Output Interface
src_mask
source address prefix mask bits
srcaddr
N/A
srcaddr_s
Source IP
srcas
N/A
srcport
TCP/UDP source port
tcp_flags
Cumulative OR of TCP flags
timestamp
tos
IP Type of Service
uptime
current time in milliseconds since export device booted
version
NetFlow export format version number