Internet Protocol Flow Information Export (IPFIX) > IPFIX Architecture > Information Elements Supported by Netvisor ONE and IPFIX
Was this helpful?
Information Elements Supported by Netvisor ONE and IPFIX
 
Data Field
Element ID
Name
Description
Data Type
Units
Data Type Semantic
proto
4
protocolIdentifier
The value of the protocol number in the IP packet header.
The protocol number identifies the IP packet payload type. Protocol numbers are defined in the IANA Protocol Numbers registry.
unsigned8
 
identifier
cur-state
6
tcpControlBits
TCP control bits observed for the packets of this Flow. This information is encoded as a bit field. For each TCP control bit, there is a bit in this set. The bit is set to 1 if any observed packet of this Flow has the corresponding TCP control bit set to 1. The bit is cleared to 0 otherwise.
unsigned16
 
flags
src-port
7
sourceTransportPort
The source port identifier in the transport header. For the transport protocols UDP, TCP, and SCTP, this is the source port number in the respective header. This field MAY also be used for future transport protocols with 16-bit source port identifiers.
unsigned16
 
identifier
src-ip
8
sourceIPv4Address
The IPv4 source address in the IP packet header.
ipv4Address
 
default
src-switch-port
10
ingressInterface
The index of the IP interface where packets of this Flow are received. The value matches the value of managed object 'ifIndex'. Note that ifIndex values are not assigned statically to an interface and that the interfaces may be renumbered every time the device's management system is re-initialized,
unsigned32
 
identifier
dst-port
11
destinationTransportPort
The destination port identifier in the transport header. For the transport protocols UDP, TCP, and SCTP, this is the destination port number in the respective header. This field MAY also be used for future transport protocols
with 16-bit destination port identifiers.
unsigned16
 
identifier
dst-ip
12
destinationIPv4Address
The IPv4 destination address in the IP packet header.
ipv4Address
 
default
dst-switch-port
14
egressInterface
The index of the IP interface where packets of this Flow are sent. The value matches the value of managed object 'ifIndex' .
Note that ifIndex values are not assigned statically to an interface and that the interfaces may be renumbered every time the device's management system is re-initialized.
unsigned32
 
identifier
 
41
exportedMessageTotalCount
The total number of IPFIX Messages the Exporting Process has sent since the Exporting Process (re-)initialization to a particular Collecting Process. The reported number excludes the IPFIX Message that carries the counter value. If this Information Element is sent to a particular Collecting Process, then by default, it specifies the number of IPFIX Messages sent to the Collecting Process.
unsigned64
messages
totalCounter
 
 
 
The total number of Flow Records that the Exporting Process has sent as Data Records since the Exporting Process (re-)initialization to a particular Collecting Process. The reported number excludes Flow Records in the IPFIX Message with the counter value.
If this Information Element is sent to a particular Collecting Process, then by default, it specifies the number of Flow Records sent to the process.
 
 
 
src-mac
56
sourceMacAddress
The IEEE 802 source MAC address field.
macAddress
 
default
vlan
58
vlanId
Virtual LAN identifier associated with ingress interface.
unsigned16
 
identifier
dst-mac
80
destinationMacAddress
The IEEE 802 source MAC address field.
macAddress
 
default
started-time
150
flowStartSeconds
The absolute time stamp of the first packet of this Flow.
dateTimeSeconds
seconds
default
ended-time
151
flowEndSeconds
The absolute time stamp of the last packet of this Flow.
dateTimeSeconds
seconds
default
 
216
 
 
unsigned16
 
identifier
 
217
 
 
unsigned16
 
identifier
 
218
 
 
unsigned64
packets
totalCounter
 
219
 
 
unsigned64
packets
totalCounter
 
222
 
 
unsigned64
packets
totalCounter
obytes
231
InitiatorOctets
The total number of Layer 4 payload bytes in a flow from the initiator. The initiator is the device triggering the session creation, and remains the same for the life of the session.
unsigned64
octets
deltaCounter
ibytes
232
responderOctets
The total number of Layer 4 payload bytes in a flow from the responder. The responder is the device that replies to the initiator, and remains the same for the life of the session.
unsigned64
octets
deltaCounter
0x01
239
 
 
unsigned8
 
identifier
src-switch-port
252
 
 
unsigned32
 
unsigned32
dst-switch-port
253
egressPhysicalInterface
The index of a networking device's physical interface for example, a switch port, where the flow packets are sent.
unsigned32
 
identifier
ether-type
256
ethernetType
The Ethernet type field of an Ethernet frame identifying the MAC client protocol carried in the payload.
unsigned16
 
identifier
 
257
 
 
unsigned8
 
identifier
 
258
 
 
dateTimeSeconds
milliseconds
default
 
259
 
 
unsigned16
 
identifier
 
260
 
 
dateTimeSeconds
seconds
default
 
261
 
 
dateTimeSeconds
seconds
default
 
262
 
 
octetArray
 
default
 
349
 
 
octetArray
 
default
 
350
 
 
string
 
default
 
351
layer2Segment
The identifier of a Layer 2 network segment in an overlay network.
The most significant byte identifies the Layer 2 network overlay network encapsulation type:
0x00 reserved
0x01 VxLAN
0x02 NVGRE
The three lowest significant bytes hold the value of the Layer 2 overlay network segment identifier.
For example:
a 24 bit segment ID VXLAN Network Identifier (VNI)
a 24 bit Tenant Network Identifier (TNI) for NVGRE
unsigned64
 
identifier
 
368
 
 
unsigned32
 
identifier
 
369
 
 
unsigned32
 
identifier
 
401
 
 
unsigned64
octets
deltaCounter
 
Netvisor ONE also supports the following private Information ElementsConfiguring IPFIX
Data Field
Element ID
Name
Description
Data Type
Units
Data Type Semantic
latency
47269.1
LatencyMicroseconds
TCP session latency
dateTimeSeconds
microseconds
default