Information Elements Supported by Netvisor One and IPFIX



Data Field

Element ID

Name

Description

Data Type

Units

Data Type Semantic

proto

4

protocolIdentifier

The value of the protocol number in the IP packet header.

The protocol number identifies the IP packet payload type. Protocol numbers are defined in the IANA Protocol Numbers registry.

unsigned8

 

identifier

cur-state

6

tcpControlBits

TCP control bits observed for the packets of this Flow. This information is encoded as a bit field. For each TCP control bit, there is a bit in this set. The bit is set to 1 if any observed packet of this Flow has the corresponding TCP control bit set to 1. The bit is cleared to 0 otherwise.

unsigned16

 

flags

src-port

7

sourceTransportPort

The source port identifier in the transport header. For the transport protocols UDP, TCP, and SCTP, this is the source port number in the respective header. This field MAY also be used for future transport protocols with 16-bit source port identifiers.

unsigned16

 

identifier

src-ip

8

sourceIPv4Address

The IPv4 source address in the IP packet header.

ipv4Address

 

default

src-switch-port

10

ingressInterface

The index of the IP interface where packets of this Flow are received. The value matches the value of managed object 'ifIndex'. Note that ifIndex values are not assigned statically to an interface and that the interfaces may be renumbered every time the device's management system is re-initialized,

unsigned32

 

identifier

dst-port

11

destinationTransportPort

The destination port identifier in the transport header. For the transport protocols UDP, TCP, and SCTP, this is the destination port number in the respective header. This field MAY also be used for future transport protocols

with 16-bit destination port identifiers.

unsigned16

 

identifier

dst-ip

12

destinationIPv4Address

The IPv4 destination address in the IP packet header.

ipv4Address

 

default

dst-switch-port

14

egressInterface

The index of the IP interface where packets of this Flow are sent. The value matches the value of managed object 'ifIndex' .

Note that ifIndex values are not assigned statically to an interface and that the interfaces may be renumbered every time the device's management system is re-initialized.

unsigned32

 

identifier

 

41

exportedMessageTotalCount

The total number of IPFIX Messages the Exporting Process has sent since the Exporting Process (re-)initialization to a particular Collecting Process. The reported number excludes the IPFIX Message that carries the counter value. If this Information Element is sent to a particular Collecting Process, then by default, it specifies the number of IPFIX Messages sent to the Collecting Process.

unsigned64

messages

totalCounter

 

 

 

The total number of Flow Records that the Exporting Process has sent as Data Records since the Exporting Process (re-)initialization to a particular Collecting Process. The reported number excludes Flow Records in the IPFIX Message with the counter value.

If this Information Element is sent to a particular Collecting Process, then by default, it specifies the number of Flow Records sent to the process.

 

 

 

src-mac

56

sourceMacAddress

The IEEE 802 source MAC address field.

macAddress

 

default

vlan

58

vlanId

Virtual LAN identifier associated with ingress interface.

unsigned16

 

identifier

dst-mac

80

destinationMacAddress

The IEEE 802 source MAC address field.

macAddress

 

default

started-time

150

flowStartSeconds

The absolute time stamp of the first packet of this Flow.

dateTimeSeconds

seconds

default

ended-time

151

flowEndSeconds

The absolute time stamp of the last packet of this Flow.

dateTimeSeconds

seconds

default

 

216

 

 

unsigned16

 

identifier

 

217

 

 

unsigned16

 

identifier

 

218

 

 

unsigned64

packets

totalCounter

 

219

 

 

unsigned64

packets

totalCounter

 

222

 

 

unsigned64

packets

totalCounter

obytes

231

InitiatorOctets

The total number of Layer 4 payload bytes in a flow from the initiator. The initiator is the device triggering the session creation, and remains the same for the life of the session.

unsigned64

octets

deltaCounter

ibytes

232

responderOctets

The total number of Layer 4 payload bytes in a flow from the responder. The responder is the device that replies to the initiator, and remains the same for the life of the session.

unsigned64

octets

deltaCounter

0x01

239

 

 

unsigned8

 

identifier

src-switch-port

252

 

 

unsigned32

 

unsigned32

dst-switch-port

253

egressPhysicalInterface

The index of a networking device's physical interface for example, a switch port, where the flow packets are sent.

unsigned32

 

identifier

ether-type

256

ethernetType

The Ethernet type field of an Ethernet frame identifying the MAC client protocol carried in the payload.

unsigned16

 

identifier

 

257

 

 

unsigned8

 

identifier

 

258

 

 

dateTimeSeconds

milliseconds

default

 

259

 

 

unsigned16

 

identifier

 

260

 

 

dateTimeSeconds

seconds

default

 

261

 

 

dateTimeSeconds

seconds

default

 

262

 

 

octetArray

 

default

 

349

 

 

octetArray

 

default

 

350

 

 

string

 

default

 

351

layer2Segment

The identifier of a Layer 2 network segment in an overlay network.

The most significant byte identifies the Layer 2 network overlay network encapsulation type:

• 0x00 reserved

• 0x01 VxLAN

• 0x02 NVGRE

The three lowest significant bytes hold the value of the Layer 2 overlay network segment identifier.

For example:

• a 24 bit segment ID VXLAN Network Identifier (VNI)

• a 24 bit Tenant Network Identifier (TNI) for NVGRE

unsigned64

 

identifier

 

368

 

 

unsigned32

 

identifier

 

369

 

 

unsigned32

 

identifier

 

401


 

unsigned64

octets

deltaCounter


Netvisor One also supports the following private Information Elements:


latency

47269.1

LatencyMicroseconds

TCP session latency

dateTimeSeconds

microseconds

default