Skip to main content
Version: 5.6

IPFIX IEs

The Unified Flow Collector supports 4284 unique IPFIX information elements (IE).

PENVendorIEs
0IANA462
9Cisco581
568NetQuest14
637Nokia (was Alcatel-Lucent)139
1916Extreme Networks11
2428UNINETT30
2636Juniper Networks5
3054Ixia Communications47
5951Citrix Systems (was Netscaler)469
6321Calix Networks463
6871CERT Coordination Center269
6876VMware30
8057CESNET81
8712LANcope (Cisco)43
8741SonicWALL160
9789Sophos (was Astaro AG)3
10704Barracuda Networks (was phion)12
12276F5 Networks91
12325Fraunhofer FOKUS111
12559INRIA10
13745Plixer33
15397Sandvine (was Procera Networks / Netintact)67
16982Masaryk University63
21373netfilter/iptables project2
25461Palo Alto Networks2
26866Gigamon Systems66
29305IPFIX Reverse Information Elements409
32182Cubro1
32622CACE Technologies12
33610FastIP / Boundary23
35566trammell.ch30
35632ntop370
39499INVEA-TECH / FlowMon Networks196
40842A10 Networks15
41916vIPtela (Cisco)2
43874pmacct4
44619Ziften Technologies18
44913RedSocks9
45346Velocloud Networks (VMware)24
45480Cognitix27
47269Pluribus Networks1
47729Niagara Networks86
51886Pensando Systems9
56506Project Antrea (VMware)44

Standards-based IEs (PEN: 0)

IDNameCommunityBasicStandardPremium
1octetDeltaCount
2packetDeltaCount
3deltaFlowCount
4protocolIdentifier
5ipClassOfService
6tcpControlBits
7sourceTransportPort
8sourceIPv4Address
9sourceIPv4PrefixLength
10ingressInterface
11destinationTransportPort
12destinationIPv4Address
13destinationIPv4PrefixLength
14egressInterface
15ipNextHopIPv4Address
16bgpSourceAsNumber
17bgpDestinationAsNumber
18bgpNextHopIPv4Address
19postMCastPacketDeltaCount
20postMCastOctetDeltaCount
21flowEndSysUpTime
22flowStartSysUpTime
23postOctetDeltaCount
24postPacketDeltaCount
25minimumIpTotalLength
26maximumIpTotalLength
27sourceIPv6Address
28destinationIPv6Address
29sourceIPv6PrefixLength
30destinationIPv6PrefixLength
31flowLabelIPv6
32icmpTypeCodeIPv4
33igmpType
34samplingInterval
35samplingAlgorithm
36flowActiveTimeout
37flowIdleTimeout
38engineType
39engineId
40exportedOctetTotalCount
41exportedMessageTotalCount
42exportedFlowRecordTotalCount
44sourceIPv4Prefix
45destinationIPv4Prefix
46mplsTopLabelType
47mplsTopLabelIPv4Address
48samplerId
49samplerMode
50samplerRandomInterval
51classId
52minimumTTL
53maximumTTL
54fragmentIdentification
55postIpClassOfService
56sourceMacAddress
57postDestinationMacAddress
58vlanId
59postVlanId
60ipVersion
61flowDirection
62ipNextHopIPv6Address
63bgpNextHopIPv6Address
64ipv6ExtensionHeaders
65transportPacketLoss Cisco Legacy
66transportUnreachability Cisco Legacy
67transportLatency Cisco Legacy
68dataPoints Cisco Legacy
69variance Cisco Legacy
70mplsTopLabelStackSection
71mplsLabelStackSection2
72mplsLabelStackSection3
73mplsLabelStackSection4
74mplsLabelStackSection5
75mplsLabelStackSection6
76mplsLabelStackSection7
77mplsLabelStackSection8
78mplsLabelStackSection9
79mplsLabelStackSection10
80destinationMacAddress
81postSourceMacAddress
82interfaceName
83interfaceDescription
84samplerName
85octetTotalCount
86packetTotalCount
87flagsAndSamplerId
88fragmentOffset
89forwardingStatus
90mplsVpnRouteDistinguisher
91mplsTopLabelPrefixLength
92srcTrafficIndex
93dstTrafficIndex
94applicationDescription
95applicationId
96applicationName
97subApplicationTag Cisco Legacy
98postIpDiffServCodePoint
99multicastReplicationFactor
100className
101classificationEngineId
102layer2packetSectionOffset
103layer2packetSectionSize
104layer2packetSectionData
105applicationVersion Cisco Legacy
106applicationVersionName Cisco Legacy
107applicationVendor Cisco Legacy
109subApplicationName Cisco Legacy
110subApplicationDescription Cisco Legacy
111templateParameterRangeEnd Cisco Legacy
128bgpNextAdjacentAsNumber
129bgpPrevAdjacentAsNumber
130exporterIPv4Address
131exporterIPv6Address
132droppedOctetDeltaCount
133droppedPacketDeltaCount
134droppedOctetTotalCount
135droppedPacketTotalCount
136flowEndReason
137commonPropertiesId
138observationPointId
139icmpTypeCodeIPv6
140mplsTopLabelIPv6Address
141lineCardId
142portId
143meteringProcessId
144exportingProcessId
145templateId
146wlanChannelId
147wlanSSID
148flowId
149observationDomainId
150flowStartSeconds
151flowEndSeconds
152flowStartMilliseconds
153flowEndMilliseconds
154flowStartMicroseconds
155flowEndMicroseconds
156flowStartNanoseconds
157flowEndNanoseconds
158flowStartDeltaMicroseconds
159flowEndDeltaMicroseconds
160systemInitTimeMilliseconds
161flowDurationMilliseconds
162flowDurationMicroseconds
163observedFlowTotalCount
164ignoredPacketTotalCount
165ignoredOctetTotalCount
166notSentFlowTotalCount
167notSentPacketTotalCount
168notSentOctetTotalCount
169destinationIPv6Prefix
170sourceIPv6Prefix
171postOctetTotalCount
172postPacketTotalCount
173flowKeyIndicator
174postMCastPacketTotalCount
175postMCastOctetTotalCount
176icmpTypeIPv4
177icmpCodeIPv4
178icmpTypeIPv6
179icmpCodeIPv6
180udpSourcePort
181udpDestinationPort
182tcpSourcePort
183tcpDestinationPort
184tcpSequenceNumber
185tcpAcknowledgementNumber
186tcpWindowSize
187tcpUrgentPointer
188tcpHeaderLength
189ipHeaderLength
190totalLengthIPv4
191payloadLengthIPv6
192ipTTL
193nextHeaderIPv6
194mplsPayloadLength
195ipDiffServCodePoint
196ipPrecedence
197fragmentFlags
198octetDeltaSumOfSquares
199octetTotalSumOfSquares
200mplsTopLabelTTL
201mplsLabelStackLength
202mplsLabelStackDepth
203mplsTopLabelExp
204ipPayloadLength
205udpMessageLength
206isMulticast
207ipv4IHL
208ipv4Options
209tcpOptions
210paddingOctets
211collectorIPv4Address
212collectorIPv6Address
213exportInterface
214exportProtocolVersion
215exportTransportProtocol
216collectorTransportPort
217exporterTransportPort
218tcpSynTotalCount
219tcpFinTotalCount
220tcpRstTotalCount
221tcpPshTotalCount
222tcpAckTotalCount
223tcpUrgTotalCount
224ipTotalLength
225postNATSourceIPv4Address
226postNATDestinationIPv4Address
227postNAPTSourceTransportPort
228postNAPTDestinationTransportPort
229natOriginatingAddressRealm
230natEvent
231initiatorOctets
232responderOctets
233firewallEvent
234ingressVRFID
235egressVRFID
236VRFname
237postMplsTopLabelExp
238tcpWindowScale
239biflowDirection
240ethernetHeaderLength
241ethernetPayloadLength
242ethernetTotalLength
243dot1qVlanId
244dot1qPriority
245dot1qCustomerVlanId
246dot1qCustomerPriority
247metroEvcId
248metroEvcType
249pseudoWireId
250pseudoWireType
251pseudoWireControlWord
252ingressPhysicalInterface
253egressPhysicalInterface
254postDot1qVlanId
255postDot1qCustomerVlanId
256ethernetType
257postIpPrecedence
258collectionTimeMilliseconds
259exportSctpStreamId
260maxExportSeconds
261maxFlowEndSeconds
262messageMD5Checksum
263messageScope
264minExportSeconds
265minFlowStartSeconds
266opaqueOctets
267sessionScope
268maxFlowEndMicroseconds
269maxFlowEndMilliseconds
270maxFlowEndNanoseconds
271minFlowStartMicroseconds
272minFlowStartMilliseconds
273minFlowStartNanoseconds
274collectorCertificate
275exporterCertificate
276dataRecordsReliability
277observationPointType
278newConnectionDeltaCount
279connectionSumDurationSeconds
280connectionTransactionId
281postNATSourceIPv6Address
282postNATDestinationIPv6Address
283natPoolId
284natPoolName
285anonymizationFlags
286anonymizationTechnique
287informationElementIndex
288p2pTechnology
289tunnelTechnology
290encryptedTechnology
294bgpValidityState
295IPSecSPI
296greKey
297natType
298initiatorPackets
299responderPackets
300observationDomainName
301selectionSequenceId
302selectorId
303informationElementId
304selectorAlgorithm
305samplingPacketInterval
306samplingPacketSpace
307samplingTimeInterval
308samplingTimeSpace
309samplingSize
310samplingPopulation
311samplingProbability
312dataLinkFrameSize
313ipHeaderPacketSection
314ipPayloadPacketSection
315dataLinkFrameSection
316mplsLabelStackSection
317mplsPayloadPacketSection
318selectorIdTotalPktsObserved
319selectorIdTotalPktsSelected
320absoluteError
321relativeError
322observationTimeSeconds
323observationTimeMilliseconds
324observationTimeMicroseconds
325observationTimeNanoseconds
326digestHashValue
327hashIPPayloadOffset
328hashIPPayloadSize
329hashOutputRangeMin
330hashOutputRangeMax
331hashSelectedRangeMin
332hashSelectedRangeMax
333hashDigestOutput
334hashInitialiserValue
335selectorName
336upperCILimit
337lowerCILimit
338confidenceLevel
339informationElementDataType
340informationElementDescription
341informationElementName
342informationElementRangeBegin
343informationElementRangeEnd
344informationElementSemantics
345informationElementUnits
346privateEnterpriseNumber
347virtualStationInterfaceId
348virtualStationInterfaceName
349virtualStationUUID
350virtualStationName
351layer2SegmentId
352layer2OctetDeltaCount
353layer2OctetTotalCount
354ingressUnicastPacketTotalCount
355ingressMulticastPacketTotalCount
356ingressBroadcastPacketTotalCount
357egressUnicastPacketTotalCount
358egressBroadcastPacketTotalCount
359monitoringIntervalStartMilliSeconds
360monitoringIntervalEndMilliSeconds
361portRangeStart
362portRangeEnd
363portRangeStepSize
364portRangeNumPorts
365staMacAddress
366staIPv4Address
367wtpMacAddress
368ingressInterfaceType
369egressInterfaceType
370rtpSequenceNumber
371userName
372applicationCategoryName
373applicationSubCategoryName
374applicationGroupName
375originalFlowsPresent
376originalFlowsInitiated
377originalFlowsCompleted
378distinctCountOfSourceIPAddress
379distinctCountOfDestinationIPAddress
380distinctCountOfSourceIPv4Address
381distinctCountOfDestinationIPv4Address
382distinctCountOfSourceIPv6Address
383distinctCountOfDestinationIPv6Address
384valueDistributionMethod
385rfc3550JitterMilliseconds
386rfc3550JitterMicroseconds
387rfc3550JitterNanoseconds
388dot1qDEI
389dot1qCustomerDEI
390flowSelectorAlgorithm
391flowSelectedOctetDeltaCount
392flowSelectedPacketDeltaCount
393flowSelectedFlowDeltaCount
394selectorIDTotalFlowsObserved
395selectorIDTotalFlowsSelected
396samplingFlowInterval
397samplingFlowSpacing
398flowSamplingTimeInterval
399flowSamplingTimeSpacing
400hashFlowDomain
401transportOctetDeltaCount
402transportPacketDeltaCount
403originalExporterIPv4Address
404originalExporterIPv6Address
405originalObservationDomainId
406intermediateProcessId
407ignoredDataRecordTotalCount
408dataLinkFrameType
409sectionOffset
410sectionExportedOctets
411dot1qServiceInstanceTag
412dot1qServiceInstanceId
413dot1qServiceInstancePriority
414dot1qCustomerSourceMacAddress
415dot1qCustomerDestinationMacAddress
416layer2OctetDeltaCount
417postLayer2OctetDeltaCount
418postMCastLayer2OctetDeltaCount
419layer2OctetTotalCount
420postLayer2OctetTotalCount
421postMCastLayer2OctetTotalCount
422minimumLayer2TotalLength
423maximumLayer2TotalLength
424droppedLayer2OctetDeltaCount
425droppedLayer2OctetTotalCount
426ignoredLayer2OctetTotalCount
427notSentLayer2OctetTotalCount
428layer2OctetDeltaSumOfSquares
429layer2OctetTotalSumOfSquares
430layer2FrameDeltaCount
431layer2FrameTotalCount
432pseudoWireDestinationIPv4Address
433ignoredLayer2FrameTotalCount
434mibObjectValueInteger
435mibObjectValueOctetString
436mibObjectValueOID
437mibObjectValueBits
438mibObjectValueIPAddress
439mibObjectValueCounter
440mibObjectValueGauge
441mibObjectValueTimeTicks
442mibObjectValueUnsigned
445mibObjectIdentifier
446mibSubIdentifier
447mibIndexIndicator
448mibCaptureTimeSemantics
449mibContextEngineID
450mibContextName
451mibObjectName
452mibObjectDescription
453mibObjectSyntax
454mibModuleName
455mobileIMSI
456mobileMSISDN
457httpStatusCode
458sourceTransportPortsLimit
459httpRequestMethod
460httpRequestHost
461httpRequestTarget
462httpMessageVersion
463natInstanceID
464internalAddressRealm
465externalAddressRealm
466natQuotaExceededEvent
467natThresholdEvent
468httpUserAgent
469httpContentType
470httpReasonPhrase
471maxSessionEntries
472maxBIBEntries
473maxEntriesPerUser
474maxSubscribers
475maxFragmentsPendingReassembly
476addressPoolHighThreshold
477addressPoolLowThreshold
478addressPortMappingHighThreshold
479addressPortMappingLowThreshold
480addressPortMappingPerUserHighThreshold
481globalAddressMappingHighThreshold
482vpnIdentifier
483bgpCommunity
486bgpExtendedCommunity
489bgpLargeCommunity

Cisco (PEN: 9)

NameCommunityBasicStandardPremium
scTag
scTrafficProcessorId
scSourceIpSample
scDestinationIpSample
scFlowContextId
scSubscriberId
scPackageId
scServiceId
scProtocolId
scSkipppedSessions
scInitiatingSide
scReportTime
scTransactionDurationMillisec
scTimeFrame
scSessionUpstreamVolume
scSessionDownstreamVolume
scProtocolSignature
scZoneId
scFlavorId
scFlowCloseMode
scAccessString
scInfoString
scClientPort
scServerPort
scSubscriberCounterId
scServiceUsageCounterId
scBreachState
scReason
scConfiguredDuration
scDuration
scEndTime
scUpstreamVolume
scDownstreamVolume
scSessions
scSeconds
scPackageCounterId
scGeneratorId
scServiceGlobalCounterId
scConcurrentSessions
scActiveSubscribers
scTotalActiveSubscribers
scLinkId
scAttackId
scAttackIp
scAttackOtherIp
scAttackPortNumber
scAttackType
scAttackSide
scAttackIpProtocol
scAttacks
scAttackMaliciousSessions
INGRESS_ACL_ID
EGRESS_ACL_ID
FW_EXT_EVENT
FW_EVENT_LEVEL
FW_EVENT_LEVEL_ID
FW_CONFIGURED_VALUE
FW_ERM_EXT_EVENT
FW_ERM_EXT_EVENT_DESC
audio rtp packets lost
audio rtp packets expected
audio rtp fwd out-of-sequence sum
audio rtp seconds ok
audio rtp seconds concealed
audio rtp seconds concealed severe
audio rtp jitter ticks
audio g107 impairment
audio g107 lossRate
audio g107 codec baseline
audio g107 codec baseline bpl
audio g107 impairment one-way-delay
audio concealment ratio now
audio concealment ratio minimum
audio concealment ratio maximum
audio concealment time
audio speech time
audio packets ok
audio packets cs
audio packets scs
audio packets rtp
audio packets silence
audio duration receive
audio duration receive voice
audio duration early packet
audio duration clock adjust
audio duration playout increase
audio duration playout decrease
audio duration late discard
audio frame size
audio frames-per-packet
audio frame arriving times difference
audio frame arriving times difference vari
audio noise level current
audio noise level average
audio noise level minimum
audio noise level maximum
audio noise level configured
audio snr current
audio snr average
audio snr minimum
audio snr maximum
audio snr configured
vxlan sgt
vxlan flags
vxlan vtep input
vxlan vtep output
SGT_SOURCE_TAG
SGT_DESTINATION_TAG
SGT_SOURCE_NAME
SGT_DESTINATION_NAME
flow cts switch derived-sgt
FW_EXT_EVENT
FW_BLACKOUT_SECS
FW_HALFOPEN_HIGH
FW_HALFOPEN_RATE
FW_ZONEPAIR_ID
FW_MAX_SESSIONS
FW_ZONEPAIR_NAME
FW_EXT_EVENT_DESC
FW_SUMMARY_PKT_CNT
FW_HALFOPEN_CNT
waas dre input
waas dre output
waas lz input
waas lz output
waas original bytes
waas optimised bytes
waas application
waas class
waas connection mode
waas bytes input
waas bytes output
PACKETS_DROPPED
counter packets dropped permanent
PACKET_RATE
BYTE_RATE
application media bytes counter
application media bytes counter permanent
application media bytes rate
application media packets counter
application media packets counter permanen
application media packets rate
application media packets rate variation
application media event
monitor event
timestamp interval
transport packets expected counter
transport packets expected counter permane
transport round-trip-time
transport event packet-loss counter
transport event packet-loss counter perman
transport packets lost counter
transport packets lost counter permanent
transport packets lost rate
transport rtp ssrc
transport rtp jitter mean
transport rtp jitter minimum
transport rtp jitter maximum
misc unsupported
counter bytes rate per-flow
counter bytes rate per-flow min
counter bytes rate per-flow max
counter packets rate per-flow
counter packets rate per-flow min
counter packets rate per-flow max
application media bytes rate per-flow
application media bytes rate per-flow min
application media bytes rate per-flow max
application media packets rate variation m
application media packets rate variation m
transport rtp flow count
transport rtp payload-type
transport packets lost counter min
transport packets lost counter max
transport event packet-loss counter min
transport event packet-loss counter max
transport packets lost rate min
transport packets lost rate max
transport tcp flow count
transport round-trip-time sum
transport round-trip-time samples
transport round-trip-time min
transport round-trip-time max
metadata global-session-id
metadata multi-party-session-id
metadata clock-rate
server response time average
refused sessions
client network delay average
server network delay average
NETWORK_DELAY_AVG network delay average
application delay average
session time minimum
session time maximum
session time average
transaction time average
closed sessions
retransmitted packets
transport bytes out-of-order
client throughput average
unresponsive sessions
transport packets out-of-order
IPv4 source observation node
IPv4 destination observation node
IPv6 source observation node
IPv6 destination observation node
pfr one-way-delay sum
pfr one-way-delay samples
ONE_WAY_DELAY pfr one-way-delay
packet arrival timestamp
transport tcp window-size minimum
transport tcp window-size maximum
transport tcp window-size average
transport tcp maximum-segment-size
transport tcp window-size sum
tcpWindowSizeSum
transport rtp jitter mean sum
application media packets rate variation s
transport tcp window-size average sum
transport rtp jitter inter arrival sum
transport rtp jitter inter arrival samples
transport rtp jitter inter arrival mean
pfr site source id ipv4
pfr site destination id ipv4
transport bytes lost
transport bytes expected
transport bytes lost rate
network delay sum
network delay sample
pfr counter event error traffic-class miti
pfr counter event error traffic-class miti
pfr counter event error traffic-class miti
pfr site source prefix ipv4
pfr site destination prefix ipv4
pfr site source prefix ipv6
pfr site destination prefix ipv6
pfr site source prefix mask ipv4
pfr site destination prefix mask ipv4
pfr site source prefix mask ipv6
pfr site destination prefix mask ipv6
pfr service provider tag identifier
pfr label identifier
application voice number called
application voice number calling
application voice setup time
application voice call duration
application voice rx bad-packet
application voice rx out-of-sequence
application voice codec id
application voice play delay current
application voice play delay minimum
application voice play delay maximum
application voice sip call-id
application voice router global-call-id
application voice delay round-trip
application voice delay end-point
application voice r-factor 1
application voice r-factor 2
application voice mos conversation
application voice mos listening
application voice concealment-ratio averag
application voice jitter configured type
application voice jitter configured minimu
application voice jitter configured maximu
application voice jitter configured initia
application voice rx early-packet count
application voice rx late-packet count
application voice jitter buffer-overrun
application voice packet conceal-count
bandwidth used
bandwidth used percentage
application video resolution width last
application video resolution height last
application video frame rate
application video payload bitrate average
application video payload bitrate fluctuat
application video frame I counter frames
application video frame I counter packets
application video frame I counter bytes
application video frame STR counter frames
application video frame STR counter packet
application video frame STR counter bytes
application video frame LTR counter frames
application video frame LTR counter packet
application video frame LTR counter bytes
application video frame super-P counter fr
application video frame super-P counter pa
application video frame super-P counter by
application video frame NR counter frames
application video frame NR counter packets
application video frame NR counter bytes
application video frame I slice-quantizati
application video frame STR slice-quantiza
application video frame LTR slice-quantiza
application video frame super-P slice-quan
application video frame NR slice-quantizat
application video eMOS compression bitstre
application video eMOS compression network
application video frame I counter packets
application video frame STR counter packet
application video frame LTR counter packet
application video frame super-P counter pa
application video frame NR counter packets
application video frame percentage damaged
application video eMOS packet-loss bitstre
application video eMOS packet-loss network
application video scene-complexity
application video level-of-motion
transport rtp sequence-number
transport rtp sequence-number last
iOAM my node-id
iOAM my node name
start timestamp
end timestamp
IOAM packet counter
IOAM byte count
IOAM cs0 packet counter
IOAM cs0 byte count
IOAM cs1 packet counter
IOAM cs1 byte count
IOAM cs2 packet counter
IOAM cs2 byte count
IOAM cs3 packet counter
IOAM cs3 byte count
IOAM cs4 packet counter
IOAM cs4 byte count
IOAM cs5 packet counter
IOAM cs5 byte count
IOAM cs6 packet counter
IOAM cs6 byte count
IOAM cs7 packet counter
IOAM cs7 byte count
IOAM lost packet counter
IOAM duplicate packet counter
IOAM reordered packet counter
IOAM highest PPC sequence number
iOAM node-id
ipv6 protocol filed
iOAM E2E Header
iOAM Path Map
iOAM number of nodes
iOAM node1 id
iOAM node1 in if id
iOAM node1 eif id
iOAM node2 id
iOAM node2 in if id
iOAM node2 eif id
iOAM node3 id
iOAM node3 in if id
iOAM node3 eif id
iOAM node4 id
iOAM node4 in if id
iOAM node4 eif id
iOAM Application metadata
iOAM sfc-id
iOAM sfc validated count
iOAM sfc invalidated count
pfr br ipv4 address
pfr status
reason id
threshold
pfr priority
long-term round-trip-time
mos below
rsvp bw pool
flow left time
bw percentage
bw fee
transport source-port min
transport source-port max
transport destination-port min
transport destination-port max
capacity
ingress bw
max ingress bw
egress bw
max egress bw
ingress rollup bw
egress rollup bw
kth rollup bw
link group name
bgp community
bgp prepend
entrance downgrade
discard rollup count
services pfr class-tag-id
services pfr mc-id
sip header from uri host ip addr
sip header from uri userinfo user
sip header to uri host ip addr
sip header to uri userinfo user
sip sess duration
sip sess end_reason
sip sess_dialed
sip sess_connected
sip sess_failed
AAA_USERNAME
XLATE_SRC_ADDR_IPV4
XLATE_DST_ADDR_IPV4
XLATE_SRC_PORT
XLATE_DST_PORT
FW_EVENT
artClientNetworkTimeLongLivedMaximum
artClientNetworkTimeLongLivedMinimum
artServerNetworkTimeLongLivedMaximum
artServerNetworkTimeLongLivedMinimum
policy qos classification hierarchy
c3pl class cce-id
c3pl class name
c3pl class type
c3pl policy cce-id
c3pl policy name
c3pl policy type
interface input fex-node-id
interface output fex-node-id
interface power
monitor device-type
connection server counter bytes network
connection client counter bytes network
wireless afd drop packets
wireless afd accept packets
wireless afd drop bytes
wireless afd accept bytes
connection concurrent-connections
application transaction counter new
services waas segment
services waas passthrough-reason
connection delay network long-lived to-ser
connection delay network long-lived to-cli
connection delay network long-lived client
connection delay network client-to-server
connection delay network to-server num-sam
connection delay network to-client num-sam
artClientpackets
artServerpackets
connection client counter bytes retransmit
connection client counter packets retransm
connection server counter bytes retransmit
connection server counter packets retransm
connection transaction counter complete
connection transaction duration sum
connection transaction duration max
connection transaction duration min
art count new connections
art count responses
art count responses histogram bucket1
art count responses histogram bucket2
art count responses histogram bucket3
art count responses histogram bucket4
art count responses histogram bucket5
art count responses histogram bucket6
art count responses histogram bucket7
connection delay response to-server histog
connection delay response to-server sum
connection delay response to-server max
connection delay response to-server min
connection delay application sum
connection delay application max
connection delay application min
connection delay response client-to-server
connection delay response client-to-server
connection delay response client-to-server
connection delay network client-to-server
connection delay network client-to-server
connection delay network client-to-server
connection delay network to-client sum
connection delay network to-client max
connection delay network to-client min
connection delay network to-server sum
connection delay network to-server max
connection delay network to-server min
mos worst 100
mos quality
mos total count
application http uri statistics
policy qos queue index
policy qos queue drops
datalink event
datalink event extended
l4r server ipv4 address
l4r server transport port
l4r server ipv6 address
l4r event
l4r event timestamp
pbhk mapped ipv4 address
pbhk mapped transport port
pbhk event
pbhk event timestamp
ETTA_INITIAL_DATA_PACKET
ETTA_SEQUENCE_OF_PACKET_LENGTHS_AND_TIMES
ETTA_SEQUENCE_OF_APPLICATION_LENGTHS_AND_TIMES
ETAByteDistribution
ETTA_TLS_RECORDS
ETTA_TLS_CIPHER_SUITES
ETTA_TLS_EXTENSIONS
ETTA_TLS_VERSION
ETTA_TLS_KEY_LENGTH
ETTA_TLS_SESSION_ID
ETTA_TLS_RANDOM
ETTA_TLS_EXTENSION_LENGTHS
ETTA_TLS_EXTENSION_TYPES
application family name
application set name
application category name
application sub category name
application group name
AVCSubApplicationValue
connection client ipv4 address
connection server ipv4 address
connection client ipv6 address
connection server ipv6 address
connection client transport port
connection server transport port
connection id
application traffic-class
application business-relevance
nvzFlowUDID
nvzFlowLoggedInUser
nvzFlowOSName
nvzFlowOSVersion
nvzFlowSystemManufacturer
nvzFlowSystemType
nvzFlowProcessAccount
nvzFlowParentProcessAccount
nvzFlowProcessName
nvzFlowProcessHash
nvzFlowParentProcessName
nvzFlowParentProcessHash
nvzFlowDNSSuffix
nvzFlowDestinationHostname
nvzFlowL4ByteCountIn
nvzFlowL4ByteCountOut
nvzFlowOSEdition
nvzFlowModuleNameList
nvzFlowModuleHashList
nvzFlowCoordinatesList
nvzFlowInterfaceInfoUID
nvzFlowInterfaceIndex
nvzFlowInterfaceType
nvzFlowInterfaceName
nvzFlowInterfaceDetailsList
nvzFlowInterfaceMac
nvzFlowUserAccountType
nvzFlowProcessAccountType
nvzFlowParentProcessAccountType
overlay session id input
overlay session id output
routing vrf service
tloc table overlay session id
tloc local system ip address
tloc local color
tloc remote system ip address
tloc remote color
tloc tunnel protocol
connection id long
drop cause id
counter bytes sdwan dropped long
sdwan sla-not-met
sdwan preferred-color-not-met
sdwan qos-queue-id
drop cause name
counter packets appqoe fec-d-pkts
counter packets appqoe fec-r-pkts
counter packets appqoe pkt-dup-d-pkts-orig
counter packets appqoe pkt-dup-d-pkts-dup
counter packets appqoe pkt-dup-r-pkts
counter packets sdwan pkt-cxp-d-pkts
counter bytes appqoe ssl-read
counter bytes appqoe ssl-written
counter bytes appqoe ssl-en-read
counter bytes appqoe ssl-en-written
counter bytes appqoe ssl-de-read
counter bytes appqoe ssl-de-written
appqoe ssl service type
appqoe ssl traffic type
appqoe ssl policy action
ETAInitialDataPacketOld
ETASequenceofPktLengthsandTimes
wlan_id
timestampAbsoluteMonitoring-intervalStart
timestampAbsoluteMonitoring-intervalEnd

NetQuest (PEN: 568)

NameCommunityBasicStandardPremium
bgp_dest_as
bgp_next_hop_ip
bgp_source_as
dns_flags_codes
dns_qclass
dns_qtype
dns_query
dns_rcode
dns_response_ipv4_addr
dns_response_ipv6_addr
dns_trans_id
dns_TTLs
dtls_certificate_issuer_cn
dtls_common_name
dtls_server_name
http_host
http_method
http_password
http_proxied
http_referrer
http_request_body_len
http_response_body_len
http_status_code
http_status_msg
http_uri
http_user_agent
http_username
JA3C
JA3S
ssh_cipher_alg_cts
ssh_cipher_alg_stc
ssh_client
ssh_compression_alg_cts
ssh_compression_alg_stc
ssh_fingerprint_hassh
ssh_fingerprint_hassh_server
ssh_host_key_alg
ssh_kex_alg_cts
ssh_kex_alg_stc
ssh_mac_alg_cts
ssh_mac_alg_stc
ssh_server
ssh_version
ssl_cert_hash
ssl_certificate_subject_key_size
ssl_cipher
ssl_client_issuer
ssl_client_subject
ssl_issuer
ssl_not_valid_after
ssl_not_valid_before
ssl_server_name
ssl_session_id
ssl_subject
ssl_version

Nokia, was Alcatel-Lucent (PEN: 637)

NameCommunityBasicStandardPremium
aaApp
aaAppGrp
aaChargingGroup
aaProt
aaRecordType
aaSubTetheringState
aaSubType
anlCongestionState
anlTopology
anlType
apn
avgFrameArrivalDelay
avgGoPLength
avgInterIFrameGap
BFrameImpaired
BFrameReceived
bsid
cellId
chargeId
chargingChar
customerId
deviceId
deviceMfgId
deviceOsId
deviceOsVer1
deviceOsVer2
deviceOsVer3
estimatedPSNR
flowAttr_abr_service
flowAttr_audio
flowAttr_download
flowAttr_encrypted
flowAttr_esni
flowAttr_realtime_communication
flowAttr_upload
flowAttr_video
frameInterArrivalJitter
frameRate
GoPType
hostName
IFrameImpaired
IFrameInterArrivalJitter
IFrameReceived
imageHeight
imageWidth
imei
imsi
ipFamily
MAPDV
mcc
mnc
MOSA
MOSAV
MOSCQ
MOSLQ
MOSNOM
MOSReference
MOSVAbsolute
MOSVRelative
msisdn
natInsideSvcid
natOutsideSvcid
natSubString
PFrameImpaired
PFrameReceived
pgw-ggsnAddr
plmnid
PPDVM
ratType
RBurst
RCQ
regionId
RG107
RGap
RLQ
RNom
roamingStatus
rtpAvgAudioBw
rtpAvgBurstLengthMs
rtpAvgBurstLengthPkts
rtpAvgGapLengthMs
rtpAvgGapLengthPkts
rtpAvgRtDelay
rtpAvgVideoBw
rtpAvgVoiceBw
rtpBurstCount
rtpCodecName
rtpDegAVSync
rtpDegCodecEncBwRestrict
rtpDegCodecQuantize
rtpDegCodecType
rtpDegDelay
rtpDegEcho
rtpDegFramePresentRate
rtpDegFrameRez
rtpDegGoPLength
rtpDegNetBwConstraint
rtpDegNoiseLevel
rtpDegPacketDiscard
rtpDegPacketLoss
rtpDegRecency
rtpDegSignalLevel
rtpDiscardPackets
rtpGapCount
rtpLostPackets
rtpNumAudioChannels
rtpOutOfSeqPackets
rtpPayloadType
rtpPeakAudioBw
rtpPeakVideoBw
rtpReceivedPackets
rtpRefClockRate
rtpRtDelaySrc
sessionDirection
sessionDurationMilliseconds
sessionEndSeconds
sessionStartSeconds
sgw-sgsnAddr
SIFrameImpaired
SIFrameReceived
slicesPerIFrame
SPFrameImpaired
SPFrameReceived
SSRC
tcpDelayAvg
tcpDelayMax
tcpDelayMin
tcpDelaySampleCnt
tcpDelayVariance
tcpRetransmittedBytes
tcpRetransmittedBytes_r
tcpRetransmittedPackets
tcpRetransmittedPackets_r
tcpSessionEstDelay
tcpSessionEstDelay_r
timezone
uli
videoInterlaced
VSTQ

Extreme Networks (PEN: 1916)

NameCommunityBasicStandardPremium
appResponseTime
clientLocation
detailedLocation
dstHostName
metaData
nacProfile
netResponseTime
oneSidedFlow
serverAddress
serverLocation
srcHostName

UNINETT (PEN: 2428)

NameCommunityBasicStandardPremium
CONN_DIRECTION
EXPVAL_PKT_DIST
EXPVAL_PKT_LENGTH
HIST_PKT_DIST
HIST_PKT_LEN
MAXRATE_100MS
MAXRATE_10MS
MAXRATE_1MS
MAXRATE_1SEC
MINRATE_100MS
MINRATE_10MS
MINRATE_1MS
MINRATE_1SEC
PAYLOAD
PIM_PACKETS
PKT_REORDERED
QSUM_PKT_DIST
QSUM_PKT_LENGTH
RTP_JITTER
RTP_LOSTFRAC
RTP_LOSTPKTS
RTP_SEQCYCLES
SERVICE
SUM_PKT_DIST
SUM_PKT_LENGTH
TCPWIN_EFF
TCPWIN_MAX
TCPWIN_MIN
VAR_PKT_DIST
VAR_PKT_LENGTH

Juniper Networks (PEN: 2636)

NameCommunityBasicStandardPremium
Forwarding Class Name
ifa_headers
ifa_metadata
ifa_sampled_packet
Packet Loss Priority

Ixia Communications (PEN: 3054)

NameCommunityBasicStandardPremium
BrowserId
BrowserName
DeviceId
DeviceName
DnsAnswer
DnsClasses
DNSIPv6Address
DNSName
DnsQuery
DnsRecordTxt
DstAsName
DstCityName
DstCountryCode
DstCountryName
DstLatitude
DstLongitude
DstRegionCode
DstRegionNode
EncryptCipher
EncryptKeyLength
EncryptType
HttpHostName
httpMessageVersion
httpRequestMethod
httpStatusCode
HttpUri
HttpUserAgent
ImsiSubscriber
ja3_fingerprint_string
L7AppId
L7AppName
Latency
RequestTime
RevOctetDeltaCount
RevPacketDeltaCount
SNI
SrcAsName
SrcCityName
SrcCountryCode
SrcCountryName
SrcLatitude
SrcLongitude
SrcRegionCode
SrcRegionName
ThreatIPv4
ThreatIPv6
ThreatType

Citrix Systems, was Netscaler (PEN: 5951)

NameCommunityBasicStandardPremium
netscalerAaaUserEmailId
netscalerAaaUsername
netscalerAAAUsername
netscalerAccessInsightFlags
netscalerAccessInsightStatusCode
netscalerAccessInsightTimestamp
netscalerAccessType
netscalerAppFqdn
netscalerAppfwAppNameId
netscalerAppfwAppSafetyIndex
netscalerAppfwAppThreatIndex
netscalerAppfwBlockFlags
netscalerAppfwGeoLocation
netscalerAppfwHttpMethod
netscalerAppfwIncarnationNumber
netscalerAppfwNSLatitude
netscalerAppfwNSLongitude
netscalerAppfwProfileBlockFlags
netscalerAppfwProfileLearnFlags
netscalerAppfwProfileLogFlags
netscalerAppfwProfileName
netscalerAppfwProfileNoneFlags
netscalerAppfwProfileRelaxedFlags
netscalerAppfwProfileSafetyIndex
netscalerAppfwProfileSecChecksSafetyIndex
netscalerAppfwProfileSigAutoUpdate
netscalerAppfwProfileSigBlockCount
netscalerAppfwProfileSigDisabled
netscalerAppfwProfileSigEnabled
netscalerAppfwProfileSigLogCount
netscalerAppfwProfileSignatureSafetyIndex
netscalerAppfwProfileSigStatCount
netscalerAppfwProfileStatsflags
netscalerAppfwProfileType
netscalerAppfwReqUrl
netscalerAppfwSequenceNumber
netscalerAppfwSessionId
netscalerAppfwSigCategory1
netscalerAppfwSigCategory2
netscalerAppfwSigCategory3
netscalerAppfwSigName
netscalerAppfwSigRuleBlockFlags
netscalerAppfwSigRuleCategory1
netscalerAppfwSigRuleCategory2
netscalerAppfwSigRuleCategory3
netscalerAppfwSigRuleCategory4
netscalerAppfwSigRuleCategory5
netscalerAppfwSigRuleEnabledFlags
netscalerAppfwSigRuleFileName
netscalerAppfwSigRuleID1
netscalerAppfwSigRuleID2
netscalerAppfwSigRuleID3
netscalerAppfwSigRuleID4
netscalerAppfwSigRuleID5
netscalerAppfwSigRuleLogFlags
netscalerAppfwSigRuleLogstring1
netscalerAppfwSigRuleLogstring2
netscalerAppfwSigRuleLogstring3
netscalerAppfwSigRuleLogstring4
netscalerAppfwSigRuleLogString5
netscalerAppfwSigRuleStatsFlags
netscalerAppfwTransformFlags
netscalerAppfwViolationLocation
netscalerAppfwViolationNameValue1
netscalerAppfwViolationNameValue2
netscalerAppfwViolationNameValue3
netscalerAppfwViolationOccuredTime
netscalerAppfwViolationSeverity
netscalerAppfwViolationThreatIndex
netscalerAppfwViolationType
netscalerAppfwViolationTypeName1
netscalerAppfwViolationTypeName2
netscalerAppfwViolationTypeName3
netscalerApplicationByteCount
netscalerApplicationStartupDuration
netscalerApplicationStartupTime
netscalerAppName
netscalerAppNameAppId
netscalerAppNameAppId1
netscalerAppNameIncarnationNumber
netscalerAppTemplateID
netscalerAppTemplateName
netscalerAuthAgentName
netscalerAuthenticationDuration
netscalerAuthenticationStage
netscalerAuthenticationstage
netscalerAuthenticationstatuscode
netscalerAuthenticationtype
netscalerAuthenticationType
netscalerAuthPolicyActionName
netscalerAuthSessionID
netscalerBackendServerName
netscalerCacheServiceIPAdress
netscalerCategoryDomainName
netscalerCategoryDomainSource
netscalerCleartextVideoFlags
netscalerClientConnectionCoreID
netscalerClientConnectionTransactionID
netscalerClientIP
netscalerClientMss
netscalerClientRTT
netscalerClientSideZeroWindowCount
netscalerClientTypeFlags
netscalerClntTcpPacketsRetransmited
netscalerCoEmbedObjFlags
netscalerCoEmbedObjNumSize
netscalerCoEmbedObjType
netscalerCoEmbedObjUrl
netscalerCoMainPageCSSCombined
netscalerCoMainPageCSSDeltaSzDec
netscalerCoMainPageCSSDeltaSzInc
netscalerCoMainPageCSSImgsInlined
netscalerCoMainPageCSSImport2Link
netscalerCoMainPageCSSInlined
netscalerCoMainPageCSSMinified
netscalerCoMainPageCSSMoved
netscalerCoMainPageCSSNumOptimized
netscalerCoMainPageCSSNumScanned
netscalerCoMainPageGifDeltaSzDec
netscalerCoMainPageGifdeltaSzInc
netscalerCoMainPageGifNumOptimized
netscalerCoMainPageGifNumScanned
netscalerCoMainPageGifToPngNum
netscalerCoMainPageGifToWebpNum
netscalerCoMainPageHtmlMinifyDeltaSz
netscalerCoMainPageImgsInlined
netscalerCoMainPageImgsLazyLd
netscalerCoMainPageImgsShrinked
netscalerCoMainPageJpegDeltaSzDec
netscalerCoMainPageJpegDeltaSzInc
netscalerCoMainPageJpegNumOptimized
netscalerCoMainPageJpegNumScanned
netscalerCoMainPageJpegToJxrNum
netscalerCoMainPageJpegToWebpNum
netscalerCoMainPageJSDeltaSzDec
netscalerCoMainPageJSDeltaSzInc
netscalerCoMainPageJSInlined
netscalerCoMainPageJSMinified
netscalerCoMainPageJSMoved
netscalerCoMainPageJSNumOptimized
netscalerCoMainPageJSNumScanned
netscalerCoMainPageLazyLdJSSz
netscalerCoMainPagePngDeltaSzDec
netscalerCoMainPagePngDeltaSzInc
netscalerCoMainPagePngNumOptimized
netscalerCoMainPagePngNumScanned
netscalerCoMainPagePngToJxrNum
netscalerCoMainPagePngToWebpNum
netscalerCoMainPageTotalOptimized
netscalerCoMainPageTotalScanned
netscalerCoMainPageTotalSzDec
netscalerCoMainPageTotalSzInc
netscalerCoMainPageTotImgDeltaSzDec
netscalerCoMainPageTotImgDeltaSzInc
netscalerCoMainPageTotImgOptimized
netscalerCoMainPageTotImgScanned
netscalerConnectionChainHopCount
netscalerConnectionChainID
netscalerConnectionId
netscalerCSecExpression
netscalerCurFactorPolicyLabel
netscalerCurrentLicenseConsumed
netscalerDbCltHostName
netscalerDbDatabaseName
netscalerDbLoginFlags
netscalerDbProtocolName
netscalerDbReqString
netscalerDbReqType
netscalerDbRespLength
netscalerDbRespStatus
netscalerDbRespStatusString
netscalerDbUserName
netscalerDetectedDomainName
netscalerDeviceID
netscalerDeviceLocation
netscalerDeviceType
netscalerEncryptedVideoFlags
netscalerEPAID
netscalerFastRetxCount
netscalerFeatureEnabledForAppflow
netscalerFlowFlags
netscalerGatewayIP
netscalerGatewayPort
netscalerGiTotalBytesRecvd
netscalerGiTotalBytesSent
netscalerGroupName
netscalerHttp2SlowrisCntr
netscalerHttpClientInteractionEndTime
netscalerHttpClientInteractionStartTime
netscalerHttpClientRenderEndTime
netscalerHttpClientRenderStartTime
netscalerHttpContentType
netscalerHttpDomainName
netscalerHttpReqAuthorization
netscalerHttpReqCookie
netscalerHttpReqForwFB
netscalerHttpReqForwLB
netscalerHttpReqHost
netscalerHttpReqMethod
netscalerHttpReqRcvFB
netscalerHttpReqRcvLB
netscalerHttpReqReferer
netscalerHttpReqUrl
netscalerHttpReqUserAgent
netscalerHttpReqVia
netscalerHttpReqXForwardedFor
netscalerHttpResForwFB
netscalerHttpResForwLB
netscalerHttpResLocation
netscalerHttpResRcvFB
netscalerHttpResRcvLB
netscalerHttpResSetCookie
netscalerHttpResSetCookie2
netscalerHttpRspLen
netscalerHttpRspStatus
netscalerIcaApplicationName
netscalerIcaApplicationTerminationTime
netscalerIcaApplicationTerminationType
netscalerIcaAppModulePath
netscalerIcaAppProcessID
netscalerIcaChannelId1
netscalerIcaChannelId1Bytes
netscalerIcaChannelId2
netscalerIcaChannelId2Bytes
netscalerIcaChannelId3
netscalerIcaChannelId3Bytes
netscalerIcaChannelId4
netscalerIcaChannelId4Bytes
netscalerIcaChannelId5
netscalerIcaChannelId5Bytes
netscalerIcaClientHostName
netscalerIcaClientIP
netscalerIcaClientLauncher
netscalerIcaClientsideDelay
netscalerIcaClientsideJitter
netscalerIcaClientsidePacketsRetransmit
netscalerIcaClientSideRTOCount
netscalerIcaClientsideRTT
netscalerIcaClientsideRXBytes
netscalerIcaClientsideSRTT
netscalerIcaClientType
netscalerIcaClientVersion
netscalerIcaConnectionPriority
netscalerIcaDeviceSerialNo
netscalerIcaDomainName
netscalerIcaFlags
netscalerIcaHostDelay
netscalerIcaL7ClientLatency
netscalerIcaL7ServerLatency
netscalerIcaLaunchMechanism
netscalerIcaNetworkUpdateEndTime
netscalerIcaNetworkUpdateStartTime
netscalerIcaRTT
netscalerIcaServerName
netscalerIcaServersideDelay
netscalerIcaServersideJitter
netscalerIcaServersidePacketsRetransmit
netscalerIcaServerSideRTOCount
netscalerIcaServersideRTT
netscalerIcaServersideSRTT
netscalerIcaSessionEndTime
netscalerICASessionGuid
netscalerIcaSessionReconnects
netscalerIcaSessionSetupTime
netscalerIcaSessionType
netscalerIcaSessionUpdateBeginSec
netscalerIcaSessionUpdateEndSec
netscalerIcaUsername
netscalerIcContGrpName
netscalerIcFlags
netscalerIcNostoreFlags
netscalerIcPolicyName
netscalerIIPAddress
netscalerIprepAppSafetyIndex
netscalerIprepAppThreatIndex
netscalerIprepAttackTime
netscalerIprepCategory
netscalerIprepGeoLocation
netscalerIprepHTTPMethod
netscalerIprepNSLatitude
netscalerIprepNSLongitude
netscalerIprepReputationScore
netscalerIprepSeverity
netscalerL7AvgClientLatency
netscalerL7AvgServerLatency
netscalerL7LatencyMaxNotifyCount
netscalerL7LatencyNotifyInterval
netscalerL7LatencyThresholdFactor
netscalerL7LatencyWaitTime
netscalerL7MaxClientLatency
netscalerL7MaxServerLatency
netscalerLicenseType
netscalerLogonTicketInfo
netscalerMainPageCoreId
netscalerMainPageId
netscalerMaxLicenseCount
netscalerMinL7Latency
netscalerMsiClientCookie
netscalerNextFactorPolicyLabel
netscalerNgsAppId
netscalerNgsAppName
netscalerNgsAppType
netscalerNgsClientsideRXBytes
netscalerNgsClientsideWireRXBytes
netscalerNgsConnectionGuid
netscalerNgsDomainName
netscalerNgsProductName
netscalerNgsRecordType
netscalerNgsServersideRXBytes
netscalerNgsServersideWireRXBytes
netscalerNgsUsageTransactionId
netscalerNgsUsageUpdateEndTime
netscalerNgsUsageUpdatStartTime
netscalerNgsUsername
netscalerNsicaACRCount
netscalerNsicaReconnectCount
netscalerNsicaSessionClientIPAddress
netscalerNsicaSessionClientPort
netscalerNsicaSessionPreviousDeviceIP
netscalerNsicaSessionServerIPAddress
netscalerNsicaSessionServerPort
netscalerNsicaSessionStatus
netscalerNsicaSessionTimestamp
netscalerNsPartitionId
netscalerNsPartitionName
netscalerObservationDomainNumPoints
netscalerObservationPointId1
netscalerObservationPointId2
netscalerObservationPointId3
netscalerObservationPointId4
netscalerObservationPointId5
netscalerOriginResStatus
netscalerOriginRspLen
netscalerOriginServerIPAdress
netscalerPolicyName
netscalerRate_limit_identifier_name
netscalerRequestURL
netscalerResourceName
netscalerResponderActionType
netscalerResponseMediaType
netscalerRoundTripTime
netscalerServersideRXBytes
netscalerServerSideZeroWindowCount
netscalerServerTTFB
netscalerServerTTLB
netscalerServerVersion
netscalerSessionSharingKey
netscalerSmoothedRoundTripTime
netscalerSNIPAddress
netscalerSrvrTcpPacketsRetransmited
netscalerSslCipherValueBE
netscalerSslCipherValueFE
netscalerSslClientCertSizeBE
netscalerSslClientCertSizeFE
netscalerSslClntCertSigHashBE
netscalerSslClntCertSigHashFE
netscalerSslErrAppName
netscalerSslErrFlag
netscalerSslFLagsBE
netscalerSslFLagsFE
netscalerSslHandshakeErrorMsg
netscalerSsliDomainCategory
netscalerSsliDomainCategoryGroup
netscalerSsliDomainName
netscalerSsliDomainReputation
netscalerSsliExecutedAction
netscalerSsliPolicyAction
netscalerSsliReasonForAction
netscalerSsliurlsetMatched
netscalerSsliurlsetPrivate
netscalerSslServerCertSizeBE
netscalerSslServerCertSizeFE
netscalerSslSessionIDBE
netscalerSslSessionIDFE
netscalerSslSigHashAlgBE
netscalerSslSigHashAlgFE
netscalerSslSrvrCertSigHashBE
netscalerSslSrvrCertSigHashFE
netscalerSsoAuthMethod
netscalerSSORequestURL
netscalerSTATicket
netscalerStreamIdentifierName
netscalerStreamSessionActualMetricValue
netscalerStreamSessionBreachedMetric
netscalerStreamSessionBreachingTransactions
netscalerStreamSessionBreachTime
netscalerStreamSessionConfiguredAcceptanceThreshold
netscalerStreamSessionConfiguredBreachThreshold
netscalerStreamSessionInterval
netscalerStreamSessionMaxThreshold
netscalerStreamSessionMinThreshold
netscalerStreamSessionName
netscalerStreamSessionTotalTransactions
netscalerSubscriberIdentifier
netscalerSyslogMessage
netscalerSyslogPriority
netscalerSyslogTimestamp
netscalerSystemRuleFlags1
netscalerSystemSafetyIndex
netscalerTcpClntConnRstCode
netscalerTcpJitter
netscalerTcpPacketsRetransmited
netscalerTcpRtoCount
netscalerTcpSlowrisCntr
netscalerTcpSrvrConnRstCode
netscalerTcpSynAttackCntr
netscalerTcpzerowindowCntr
netscalerTcpZeroWindowCount
netscalerTempVPNsessionID
netscalerTenantName
netscalerTransactionId
netscalerTransportProtocolType
netscalerTxnClientIpv4Addr
netscalerTxnServerIpv4Addr
netscalerUrlCategory
netscalerUrlCategoryactionReason
netscalerUrlCategoryGroup
netscalerUrlCategoryReputation
netscalerUrlCatPolicyName
netscalerUrlsetMatched
netscalerUrlsetPrivate
netscalerVideoSessAbsStarttime
netscalerVideoSessAppReqBytes
netscalerVideoSessAppRespBytes
netscalerVideoSessClientIP4
netscalerVideoSessClientIpv6Addr
netscalerVideoSessClientVlan
netscalerVideoSessDuration
netscalerVideoSessFlags
netscalerVideoSessID
netscalerVideoSessMediaType
netscalerVideoSessPacingRate
netscalerVideoSessReqbytes
netscalerVideoSessRespBytes
netscalerVideoSessTxnCount
netscalerVideoTxnAppReqBytes
netscalerVideoTxnAppRespBytes
netscalerVideoTxnClientIpv6Addr
netscalerVideoTxnClientPort
netscalerVideoTxnClientVlan
netscalerVideoTxnEndtime
netscalerVideoTxnEndtimeUsec
netscalerVideoTxnId
netscalerVideoTxnLastDataTime
netscalerVideoTxnLastDataTimeUsec
netscalerVideoTxnMediaType
netscalerVideoTxnPacingRate
netscalerVideoTxnReqBytes
netscalerVideoTxnRespBytes
netscalerVideoTxnServerIpv6Addr
netscalerVideoTxnServerPort
netscalerVideoTxnServerVlan
netscalerVideoTxnSessionDiameterTimestamp
netscalerVideoTxnSessionID
netscalerVideoTxnSessionSubscriberID
netscalerVideoTxnSessionSubscriberSessionID
netscalerVideoTxnSessionTcpTimestamp
netscalerVideoTxnSessionTimestamp
netscalerVideoTxnStarttime
netscalerVideoTxnStarttimeUsec
netscalerVlanNumber
netscalerVPNRequestURL
netscalerVPNsessionID
netscalerVPNsessionIdTemp
netscalerVPNSessionLogoutMode
netscalerVPNSessionMode
netscalerVPNSessionState
netscalerVserverFQDN
netscalerVserverIP

Calix Networks (PEN: 6321)

NameCommunityBasicStandardPremium
active-default-subscribers-with-pcrf-enabled
active-dynamic-ips
active-dynamic-subscribers
active-leases
active-static-ips
active-static-subscribers
active-subscribers-with-pcrf-enabled
address-family
admin-state
admitted excess upstream bw
admitted fixed upstream bw
admitted-assured-upstream-bw
align-errors
alignment-error
arp-timer-expiries
assured-upstream-bytes
available excess upstream bw
available fixed upstream bw
available-assured-upstream-bw
avg-active-dynamic-subscribers
avg-active-static-subscribers
avg-leases
backward-available-indicators
backward-avg-frame-loss-ratio
backward-avg-frame-loss-ratio
backward-consecutive-high-loss-intervals
backward-high-loss-intervals
backward-max-frame-loss-ratio
backward-max-frame-loss-ratio
backward-min-frame-loss-ratio
backward-min-frame-loss-ratio
backward-received-frames
backward-transmitted-frames
backward-unavailable-indicators
bgp
bgp-stat-aid
bin-duration
bin-number
bng-arp-counters-id
bng-dhcp-pool-aid
bng-dhcp-subscriber-aid
bng-diameter-client-aid
bng-gx-counter-aid
bng-policy-mgmt-aid
bng-radius-client-aid
bng-static-subscriber-aid
bng-url-redirect-aid
broadcast-pkts
buffer-overflow-recv
buffer-overflow-xmit
carrier-sense-error
cause
ccm-received
ccm-received-bad-if-status
ccm-received-bad-port-status
ccm-received-bad-sender-id
ccm-received-bad-seq-errors
ccm-received-rdi
ccm-transmitted
ccm-transmitted-rdi
cfg-speed
configured-active-subscribers
configured-dynamic-subscribers
configured-pool-size
configured-subscribers-with-pcrf-enabled
connected
cpu-usage
crc-align-errors
curr-version
cvlan
deferred-xmit-count
delay-measurement-aid
diameter-client-name
dm1-received
dm1-transmitted
dmm-received
dmm-transmitted
dmr-received
dmr-transmitted
dn-mhf-lbm-received
dn-mhf-lbr-transmitted
dn-mhf-ltm-forwarded
dn-mhf-ltm-received
dn-mhf-ltr-transmitted
downstream-bip-errors
downstream-bip8-err-sec
downstream-bip8-severely-err-sec
downstream-bip8-unavail-sec
downstream-broadcast-packets
downstream-bytes
downstream-crc-errored-packets
downstream-discard-events
downstream-drop-events
downstream-fec-corrected-bytes
downstream-fec-corrected-code-words
downstream-fec-sec
downstream-fec-total-code-words
downstream-fec-uncorrected-code-words
downstream-gem-frames
downstream-gem-payload-bytes
downstream-multicast-packets
downstream-octet-ibont
downstream-octets
downstream-octets-internet
downstream-octets-soho
downstream-oversize-packets
downstream-packets
downstream-percentage
downstream-undersize-packets
downstream-unicast-packets
dowstream-discarded-frames
drop-events
dynamic-policy-apply-failures
dynamic-policy-apply-requests
dynamic-policy-apply-successes
egress-bucket-bps
egress-bucket-percent
egress-bucket-seconds
elapsed-time
elapsed-time
elapsed-time
end-time
end-time
end-time
end-time
eth-vlan-monitor-aid
excess-upstream-bytes
excessive-collision
fcs-errors
fixed-upstream-bytes
flow-bytes
flow-direction
flow-drop-bytes
flow-drop-pkts
flow-number
flow-pkts
forward-available-indicators
forward-avg-frame-loss-ratio
forward-avg-frame-loss-ratio
forward-consecutive-high-loss-intervals
forward-high-loss-intervals
forward-max-frame-loss-ratio
forward-max-frame-loss-ratio
forward-min-frame-loss-ratio
forward-min-frame-loss-ratio
forward-received-frames
forward-transmitted-frames
forward-unavailable-indicators
fragments
frame-delay-backward-avg
frame-delay-backward-max
frame-delay-backward-min
frame-delay-forward-avg
frame-delay-forward-max
frame-delay-forward-min
frame-delay-range-backward-avg
frame-delay-range-backward-max
frame-delay-range-forward-avg
frame-delay-range-forward-max
frame-delay-range-two-way-avg
frame-delay-range-two-way-max
frame-delay-two-way-avg
frame-delay-two-way-max
frame-delay-two-way-min
frame-too-long
gem-encryption-key-errors
grace-timer-expiries
green-octets-pon
green-octets-uni
green-pkts-pon
green-pkts-uni
group
hostname
if-index
in-keepalives
in-notifications
in-oam-pdus
in-oam-pdus
in-opens
in-total-messages
in-updates
ingress-bucket-bps
ingress-bucket-percent
ingress-bucket-seconds
inter-frame-delay-variation-backward-avg
inter-frame-delay-variation-backward-max
inter-frame-delay-variation-backward-min
inter-frame-delay-variation-forward-avg
inter-frame-delay-variation-forward-max
inter-frame-delay-variation-forward-min
inter-frame-delay-variation-two-way-avg
inter-frame-delay-variation-two-way-max
inter-frame-delay-variation-two-way-min
interface-ethernet-aid
interface-lag-aid
internal-mac-recv-error
internal-mac-xmit-error
isis
jabbers
lag-vlan-monitor-aid
laser-bias-current
late-collision
lbm-received
lbm-transmitted
lbr-received
lbr-received-bad-msdu
lbr-received-out-of-order
lbr-transmitted
ldp-peer
lease-renewals
lease-timer-expiries
leases-in-grace
lm-availability-aid
lmm-Received
lmm-Transmitted
lmr-Received
lmr-Transmitted
loss-measurement-aid
ltm-received
ltm-transmitted
ltr-received
ltr-transmitted
ltr-unexpected
mac
max-active-dynamic-subscribers
max-active-static-subscribers
max-leases
mean-optical-launch-power
mep-stats-aid
min-active-dynamic-subscribers
min-active-static-subscribers
min-leases
mip-stats-aid
module-temperature
module-tx-power
module-vcc
mpls-stat-aid
msg-timeout
multicast-pkts
multiple-collision
ne-opt-signal-level
neighbor
neighbor-v6
octets
octets-policer-discards
offers-accepted
offers-sent
OLT-ont-bin-aid
OLT-pon-dyn-agg-util-total-aid
OLT-pon-optical-aid
OLT-pon-util-aid
ONT-eth-total-aid
ONT-eth-util-aid
ONT-evcstats-aid
ont-id
ONT-ifstats-aid
oper-state
optical-channel
ospf
ospf-stat-aid
out-keepalives
out-notifications
out-oam-pdus
out-oam-pdus
out-opens
out-total-messages
out-updates
oversize-pkts
pcrf-timer-expiries
peer-disconnect
peer-down
peer-up
pkts
pkts-1024to1518
pkts-128to255
pkts-1519to2047
pkts-2048to4095
pkts-256-511
pkts-4096to9216
pkts-512to1023
pkts-64
pkts-65to127
pkts-9217to16383
pkts-policer-discards
pon-ont-type-util-aid
pon-ont-util-aid
pool-name
port
power-feed-voltage
raa-session-id-mismatch
radius-client-name
range-length
red-octets-uni
red-pkts-uni
request-timeouts
requests-declined
requests-granted
rfavo received-optical-power
role
route-summary-stat-aid
rtx-accounting-interim
rtx-accounting-start
rtx-accounting-stop
rtx-msg
rx-accounting-failure-resp
rx-accounting-success-resp
rx-address
rx-address withdraw
rx-arp-req
rx-available-bandwidth
rx-bps
rx-broadcast-octets
rx-broadcast-pkts
rx-cca-i
rx-cca-u
rx-cea
rx-db-des
rx-discards
rx-errors
rx-hello
rx-initialization
rx-keepalive
rx-label abort request
rx-label mapping
rx-label release
rx-label request
rx-label withdraw
rx-ls-ack
rx-ls-req
rx-ls-upd
rx-multicast-octets
rx-multicast-pkts
rx-notification
rx-octets
rx-optical-power
rx-pause-frames
rx-pkts
rx-pps
rx-rar
rx-unicast-octets
rx-unicast-pkts
rx-unknown-protos
rx-utilization
sample-time
sample-time
shelf
single-collision
slm-received
slm-transmitted
slot
slr-received
slr-Transmitted
sqe-counter
start-time
static
stats-index
stats-index
stats-index
subscriber-flows-aid
suspect
suspect
suspect
suspect
svlan
temp-sensor
temperature
time-elapsed
total
tx-accounting-interim
tx-accounting-start
tx-accounting-stop
tx-address
tx-address withdraw
tx-arp-resp
tx-available-bandwidth
tx-bias
tx-bps
tx-broadcast-octets
tx-broadcast-pkts
tx-ccr-i
tx-ccr-u
tx-cer
tx-db-des
tx-discards
tx-errors
tx-hello
tx-initialization
tx-keepalive
tx-label abort request
tx-label mapping
tx-label release
tx-label request
tx-label withdraw
tx-ls-ack
tx-ls-req
tx-ls-upd
tx-multicast-octets
tx-multicast-pkts
tx-notification
tx-octets
tx-opt-level
tx-pause-frames
tx-pkts
tx-power
tx-pps
tx-raa
tx-unicast-octets
tx-unicast-pkts
tx-utilization
tx-voltage
undersize-pkts
up-mhf-lbm-received
up-mhf-lbr-transmitted
up-mhf-ltm-forwarded
up-mhf-ltm-received
up-mhf-ltr-transmitted
upstream-bip-errors
upstream-bip8-err-sec
upstream-bip8-severely-err-sec
upstream-bip8-unavail-sec
upstream-broadcast-packets
upstream-bytes
upstream-crc-errored-packets
upstream-discard-events
upstream-drop-events
upstream-fec-corrected-bytes
upstream-fec-corrected-code-words
upstream-fec-sec
upstream-fec-total-code-words
upstream-fec-uncorrected-code-words
upstream-gal-discarded-frames
upstream-gem-frames
upstream-gem-hec-errors
upstream-gem-payload-bytes
upstream-missed-bursts
upstream-missed-bursts-err-sec
upstream-multicast-packets
upstream-octets
upstream-octets-ibont
upstream-octets-internet
upstream-octets-soho
upstream-oversize-packets
upstream-packets
upstream-packets-1024-to-1518-octets
upstream-packets-128-to-255-octets
upstream-packets-256-to-511-octets
upstream-packets-512-to-1023-octets
upstream-packets-64-octets
upstream-packets-64-to-127-octets
upstream-percentage
upstream-undersize-packets
upstream-unicast-packets
uptime
uptime
url-redirect-policies-applied
url-redirect-subscribers
url-updates
vrf-name
watchdog-timer-expiries
yellow-octets-pon
yellow-octets-uni
yellow-pkts-pon
yellow-pkts-uni

CERT Coordination Center (PEN: 6871)

NameCommunityBasicStandardPremium
assembledFragmentCount
averageInterarrivalTime
certToolId
dataByteCount
dhcpFingerPrint
dhcpOption
dhcpVendorCode
dnp3DestinationAddress
dnp3Function
dnp3ObjectData
dnp3SourceAddress
dnsAlgorithm
dnsAuthoritative
dnsCName
dnsDigest
dnsDigestType
dnsFlags
dnsHashData
dnsHitCount
dnsID
dnsIterations
DNSKEY_protocolIdentifier
dnsKeyTag
dnsLabels
dnsMXExchange
dnsMXPreference
dnsNSDName
dnsNXDomain
dnsPTRDName
dnsPublicKey
dnsQName
dnsQRType
dnsQueryResponse
dnsRName
dnsRRSection
dnsSalt
dnsSignature
dnsSignatureExpiration
dnsSignatureInception
dnsSigner
dnsSOAExpire
dnsSOAMinimum
dnsSOAMName
dnsSOARefresh
dnsSOARetry
dnsSOARName
dnsSOASerial
dnsSRVPort
dnsSRVPriority
dnsSRVTarget
dnsSRVWeight
dnsTTL
dnsTXTData
dnsTypeCovered
ethernetIPData
expiredFragmentCount
exporterConfiguredId
exporterUniqueId
firstEightNonEmptyPacketDirections
firstNonEmptyPacketSize
firstPacketBanner
flowAttributes
flowTableFlushEventCount
flowTablePeakCount
ftpPass
ftpRespCode
ftpReturn
ftpType
ftpUser
httpAccept
httpAcceptCharset
httpAcceptEncoding
httpAcceptLanguage
httpAge
httpAllow
httpAuthorization
httpConnection
httpContentEncoding
httpContentLanguage
httpContentLength
httpContentLocation
httpContentType
httpCookie
httpDate
httpDNT
httpExpect
httpExpires
httpFrom
httpGet
httpHost
httpIMEI
httpIMSI
httpLastModified
httpLocation
httpMSISDN
httpProxyAuthentication
httpReferer
httpRefresh
httpResponse
httpServerString
httpSetCookie
httpSubscriber
httpUpgrade
httpUserAgent
httpVersion
httpVia
httpWarning
httpX-DeviceID
httpX-Forwarded-For
httpX-Forwarded-Host
httpX-Forwarded-Proto
httpX-Forwarded-Server
httpX-Profile
httpX-UA-Compatible
imapAuthenticate
imapCapability
imapCommand
imapExists
imapLogin
imapRecent
imapStartTLS
initialTCPFlags
ircTextMessage
largePacketCount
maxPacketSize
meanFlowRate
meanPacketRate
modbusData
mptcpAddressID
mptcpFlags
mptcpInitialDataSequenceNumber
mptcpMaximumSegmentSize
mptcpReceiverToken
mysqlCommandCode
mysqlCommandText
mysqlUsername
nDPIL7Protocol
nDPIL7SubProtocol
nntpCommand
nntpResponse
nonEmptyPacketCount
observedData
observedDataTotalCount
obsoleteReverseInitialTCPFlags
obsoleteReverseOctetTotalCount
obsoleteReversePacketTotalCount
obsoleteReversePayload
obsoleteReverseTcpSequenceNumber
obsoleteReverseUnionTCPFlags
obsoleteReverseVlanId
osFingerPrint
osName
osVersion
payload
payloadEntropy
pop3TextMessage
Reverse flow averageInterarrivalTime
Reverse flow dataByteCount
Reverse flow dhcpFingerPrint
Reverse flow dhcpVendorCode
Reverse flow firstEightNonEmptyPacketDirections
Reverse flow firstNonEmptyPacketSize
Reverse flow firstPacketBanner
Reverse flow flowAttributes
Reverse flow initialTCPFlags
Reverse flow largePacketCount
Reverse flow maxPacketSize
Reverse flow nonEmptyPacketCount
Reverse flow osFingerPrint
Reverse flow osName
Reverse flow osVersion
Reverse flow payload
Reverse flow payloadEntropy
Reverse flow rtpPayloadType
Reverse flow secondPacketBanner
Reverse flow smallPacketCount
Reverse flow standardDeviationInterarrivalTime
Reverse flow standardDeviationPayloadLength
Reverse flow tcpUrgentCount
Reverse flow unionTCPFlags
reverseFlowDeltaMilliseconds
rrIPv4
rrIPv6
rtpPayloadType
rtspCommand
rtspContentLength
rtspContentType
rtspCSeq
rtspJitter
rtspLocation
rtspPacketsReceived
rtspReturnCode
rtspTransport
rtspURL
rtspUserAgent
rtspVersion
secondPacketBanner
silkAppLabel
silkFlowSensor
silkFlowType
silkTCPState
sipAddress
sipCommand
sipContentLength
sipInvite
sipMaxForwards
sipUserAgent
sipVia
slpMessageType
slpString
slpVersion
smallPacketCount
smtpContentDisposition
smtpContentType
smtpDate
smtpEnhanced
smtpFilename
smtpFrom
smtpHello
smtpResponse
smtpSize
smtpSubject
smtpTo
sshVersion
sslCertificate
sslCertificateHash
sslCertificateMD5
sslCertificateSHA1
sslCertIssuerCommonName
sslCertIssuerCountryName
sslCertIssuerLocalityName
sslCertIssuerOrgName
sslCertIssuerOrgUnitName
sslCertIssuerState
sslCertIssuerStreetAddress
sslCertIssuerZipCode
sslCertSerialNumber
sslCertSignature
sslCertSubCommonName
sslCertSubCountryName
sslCertSubLocalityName
sslCertSubOrgName
sslCertSubOrgUnitName
sslCertSubState
sslCertSubStreetAddress
sslCertSubZipCode
sslCertValidityNotAfter
sslCertValidityNotBefore
sslCertVersion
sslCipher
sslClientVersion
sslCompressionMethod
sslObjectType
sslObjectValue
sslPublicKeyAlgorithm
sslPublicKeyLength
sslRecordVersion
sslServerCipher
sslServerName
standardDeviationInterarrivalTime
standardDeviationPayloadLength
tcpUrgentCount
templateDescription
templateName
tftpFilename
tftpMode
tombstoneId
unionTCPFlags
yafFlowKeyHash

VMware (PEN: 6876)

NameCommunityBasicStandardPremium
algControlFlowId
algFlowType
algType
averageLatency
egressInterfaceAttr
flowDirection
ingressInterfaceAttr
retransmissionCount
ruleId
sessionFlags
tenantDestIPv4
tenantDestIPv6
tenantDestPort
tenantProtocol
tenantSourceIPv4
tenantSourceIPv6
tenantSourcePort
tunnelDestinationIPv4Address
tunnelDestinationTransportPort
tunnelKey
tunnelProtocolIdentifier
tunnelSourceIPv4Address
tunnelSourceTransportPort
tunnelType
vifId
vifUuid
virtualObsID
vmUuid
vnicIndex
vxlanExportRole

CESNET (PEN: 8057)

NameCommunityBasicStandardPremium
ARP_DST_HA
ARP_DST_PA
ARP_HA_FORMAT
ARP_OPCODE
ARP_PA_FORMAT
ARP_SRC_HA
ARP_SRC_PA
DNS_A
DNS_AAAA
DNS_ANSWERS
DNS_ATYPE
DNS_CLASS
DNS_DO
DNS_ID
DNS_NAME
DNS_PSIZE
DNS_QTYPE
DNS_RCODE
DNS_RDATA
DNS_RLENGTH
DNS_RR_TTL
FLOWDIR_SYN
HB_DIR
HB_SIZE_MSG
HB_SIZE_PAYLOAD
HB_TYPE
HTTP_REQUEST_AGENT
HTTP_REQUEST_HOST
HTTP_REQUEST_HOST
HTTP_REQUEST_METHOD_ID
HTTP_REQUEST_RANGE
HTTP_REQUEST_REFERER
HTTP_REQUEST_URL
HTTP_RESPONSE_CONTENT_TYPE
HTTP_RESPONSE_STATUS_CODE
HTTP_RESPONSE_TIME
HTTP_RESPONSE_TIME
NTP_DELAY
NTP_DISPERSION
NTP_LEAP
NTP_MODE
NTP_ORIG
NTP_POLL
NTP_PRECISION
NTP_RECV
NTP_REF
NTP_REF_ID
NTP_SENT
NTP_STRATUM
NTP_VERSION
SIP_CALL_ID
SIP_CALLED_PARTY
SIP_CALLING_PARTY
SIP_CSEQ
SIP_MSG_TYPE
SIP_REQUEST_URI
SIP_STATUS_CODE
SIP_USER_AGENT
SIP_VIA
SIPContact
SIPFrom
SIPMethod
SIPRecordRoute
SIPRequestURI
SIPRoute
SIPStatusCode
SIPTo
SIPVia
SMTP_2XX_STAT_CODE_COUNT
SMTP_3XX_STAT_CODE_COUNT
SMTP_4XX_STAT_CODE_COUNT
SMTP_5XX_STAT_CODE_COUNT
SMTP_COMMAND_FLAGS
SMTP_DOMAIN
SMTP_FIRST_RECIPIENT
SMTP_FIRST_SENDER
SMTP_FLAGS
SMTP_MAIL_CMD_COUNT
SMTP_RCPT_CMD_COUNT
SMTP_STAT_CODE_FLAGS
VENOM

LANcope, now Cisco (PEN: 8712)

NameCommunityBasicStandardPremium
EndpointFlowParentProcessAccount
EndpointFlowParentProcessHash
EndpointFlowParentProcessName
EndpointFlowProcessAccount
EndpointFlowProcessHash
EndpointFlowProcessName
FlowSensorApplicationDetails
FlowSensorApplicationIdentifier
FlowSensorBadFlagBadRST
FlowSensorBadFlagNoACK
FlowSensorBadFlagNoFlag
FlowSensorBadFlagSYNFIN
FlowSensorBadFlagURG
FlowSensorBadFlagXmas
FlowSensorDestinationEmailIn
FlowSensorDestinationEmailInMessages
FlowSensorDestinationEmailInTrys
FlowSensorDestinationEmailOut
FlowSensorDestinationEmailOutMessages
FlowSensorDestinationEmailOutTrys
FlowSensorEmbeddedICMPCode
FlowSensorEmbeddedICMPProtocol
FlowSensorEmbeddedICMPType
FlowSensorFragPacketDifferentSizes
FlowSensorFragPacketTooLong
FlowSensorFragPacketTooShort
FlowSensorInitiator
FlowSensorRetransmits
FlowSensorRoundTripTime
FlowSensorServerResponseTime
FlowSensorShortFragAttack
FlowSensorSourceEmailIn
FlowSensorSourceEmailInMessages
FlowSensorSourceEmailInTrys
FlowSensorSourceEmailOut
FlowSensorSourceEmailOutMessages
FlowSensorSourceEmailOutTrys
FlowSensorTCPBadTotalCount
FlowSensorTCPFragTotalCount
FlowSensorTCPSRSTotalCount
FlowSensorTCPSYNACKTotalCount
FlowSensorTraces
FlowSensorTrustsecSourceIdentifier

SonicWALL (PEN: 8741)

NameCommunityBasicStandardPremium
APP_ATTR_BIT_MASK
APP_BWM_ATTR
APP_CAT_ID
APP_CAT_NAME
APP_CONTENT_TYPE
APP_ID
APP_INDEX
APP_NAME
APP_RISK_ATTR
APP_SIG_ID
APP_TECH_ATTR
ASPY_INDEX
ASPY_NAME
ASPY_PROD_ID
ASPY_PROD_NAME
ASPY_SIG_ID
COLUMN_IDENTIFIER
COLUMN_NAME
COLUMN_STANDARD_IPFIX_ID
COLUMN_TYPE
CORE_STAT_CORE_ID
CORE_STAT_CORE_UTIL
COUNTRY_ID
COUNTRY_NAME
DEV_IFACE_ID
DEV_IP_ADDR
DEV_MAC_ADDR
DEV_NAME
FLOW_BLOCK_REASON
FLOW_END_TIME
FLOW_IDENTIFIER
FLOW_INIT_OCTETS_RATE
FLOW_INIT_PKT_RATE
FLOW_INIT_PKT_SIZE
FLOW_RESP_OCTETS_RATE
FLOW_RESP_PKT_RATE
FLOW_RESP_PKT_SIZE
FLOW_START_TIME
FLOW_TO_APPLICATION_ID
FLOW_TO_IPS_ID
FLOW_TO_SPYWARE_ID
FLOW_TO_USER_ID
FLOW_TO_VIRUS_ID
GAV_INDEX
GAV_NAME
GAV_SIG_ID
IF_STAT_CONN_RATE
IF_STAT_IF_MODE
IF_STAT_IF_MTU
IF_STAT_IF_NAME
IF_STAT_IF_SPEED
IF_STAT_IF_STATE
IF_STAT_IF_TYPE
IF_STAT_IFACE
IF_STAT_IN_OCTETS_RATE
IF_STAT_IN_PKT_SIZE
IF_STAT_IN_PKTS_RATE
IF_STAT_IP_ADDRESS
IF_STAT_MAC_ADDRESS
IF_STAT_OUT_OCTETS_RATE
IF_STAT_OUT_PKT_SIZE
IF_STAT_OUT_PKTS_RATE
IF_STAT_SECURITY_TYPE
IF_STAT_ZONE_NAME
INIT_TO_RESP_DELTA_OCTETS
INIT_TO_RESP_DELTA_PKTS
INIT_TO_RESP_OCTETS
INIT_TO_RESP_PKTS
INIT_VPN_SPI_OUT
INITIATOR_GW_IP_ADDR
INITIATOR_GW_MAC
INITIATOR_IFACE
INITIATOR_IP_ADDR
INITIATOR_PORT
INTERNAL_FLAGS
IPS_CAT_ID
IPS_CAT_NAME
IPS_INDEX
IPS_NAME
IPS_SIG_ID
LOCATION_DOMAIN_NAME
LOCATION_IP
LOCATION_REGION_ID
MEDIA_PROTOCOL
MEDIA_TYPE
MEM_AVAIL_RAM
MEM_DB_RAM
MEM_FLOW_COUNT
MEM_PER_FLOW
MEM_TOTAL_RAM
MEM_USED_RAM
PROTOCOL_TYPE
RATING_INDEX
RATING_NAME
REGION_ID
REGION_NAME
RESP_TO_INIT_DELTA_OCTETS
RESP_TO_INIT_DELTA_PKTS
RESP_TO_INIT_OCTETS
RESP_TO_INIT_PKTS
RESP_VPN_SPI_OUT
RESPONDER_GW_IP_ADDR
RESPONDER_GW_MAC
RESPONDER_IFACE
RESPONDER_IP_ADDR
RESPONDER_PORT
SERVICE_IP_TYPE
SERVICE_NAME
SERVICE_PORT_BEGIN
SERVICE_PORT_END
SNWL_OPTION
SPAM_FLOW_ID
SPAM_FROM_E_MAIL
SPAM_SESS_ID
SPAM_SPAMMER
SPAM_TIME_ID
SPAM_TO_E_MAIL
SPAM_TYPE
TABLE_NAME
TEMPLATE_IDENTIFIER
TIME_STAMP
TOP_APPS_APPNAME
TOP_APPS_RATE
TOP_APPS_SIGID
URL_FLOW_ID
URL_IP
URL_NAME
URL_RATING_VAL1
URL_RATING_VAL2
URL_RATING_VAL3
URL_RATING_VAL4
URL_TIME_ID
USER_AUTH_TYPE
USER_DOMAIN_NAME
USER_ID
USER_INDEX
USER_IP_ADDR
USER_NAME
VOIP_FLOW_ID
VOIP_INIT_CALL_ID
VOIP_INIT2RESP_AVG_LATENCY
VOIP_INIT2RESP_LOST_PKTS
VOIP_INIT2RESP_MAX_LATENCY
VOIP_RESP_CALL_ID
VOIP_RESP2INIT_AVG_LATENCY
VOIP_RESP2INIT_LOST_PKTS
VOIP_RESP2INIT_MAX_LATENCY
VOIP_TIME_ID
VPN_AUTHENTICATION_TYPE
VPN_ENCRYPTION_TYPE
VPN_END_TIME
VPN_IN_SPI_ID
VPN_LOCAL_GW
VPN_OUT_SPI_ID
VPN_POLICY_TYPE
VPN_PROTOCOL_TYPE
VPN_REMOTE_GW
VPN_START_TIME
VPN_TUNNEL_IFACE_ID
VPN_TUNNEL_NAME

Sophos, was Astaro AG (PEN: 9789)

NameCommunityBasicStandardPremium
afcProtocol
afcProtocolName
flowDirection

Barracuda Networks, was phion (PEN: 10704)

NameCommunityBasicStandardPremium
AuditCounter
BindIPv4Address
BindTransportPort
ConnIPv4Address
ConnTransportPort
FW_Rule
LogOp
Reason
ReasonText
ServiceName
Timestamp
TrafficType

F5 Networks (PEN: 12276)

NameCommunityBasicStandardPremium
3gppParameters
aclPolicyName
aclPolicyType
aclRuleName
action
applicationCategoryId
attackEvent (dosAttackEvent)
attackId (dosAttackId)
attackName (dosAttackName)
attackType
bigipHostName
bigipMgmtIPv4Address
bigipMgmtIPv6Address
classification
concurrentFlows
contextName
contextType
destinationFqdn
destinationGeo
deviceProduct
deviceVendor
deviceVersion
dnsQueryType
downlinkVolume
dropReason
durationSec
errdefsMsgNo
flowId
flowStartMilliSeconds
flowStartSeconds
flowStopMilliSeconds
flowStopSeconds
httpHostname
httpHostnameTruncated
httpResponseCode
httpUrl
httpUrlTruncated
httpUserAgent
httpUserAgentTruncated
ipfixMsgNo
ipintelligencePolicyName
ipintelligenceThreatName
lastRecordSent
logMsgDrops
logMsgName
logprofileName
messageSeverity
msgName
newFlows
observationTimeSeconds
packetsDropped (dosPacketsDropped)
packetsReceived (dosPacketsReceived)
partitionName
queryName
recordReason
recordType
reportId
reportVersion
saTransPool
saTransType
sipCallee
sipCaller
sipMethodName
skippedTransactions
sourceFqdn
sourceGeo
sourceUser
subscriberId
subscriberIdType
successfulTransactions
terminatedFlows
timestampMsec
totalTransactions
transactionNumber
transactionStartMilliSeconds
transactionStartSeconds
transactionStopMilliSeconds
transactionStopSeconds
transDestinationIPv4Address
transDestinationIPv6Address
transDestinationPort
transIpProtocol
transRouteDomain
transSourceIPv4Address
transSourceIPv6Address
transSourcePort
transVlanName
uplinkVolume
urlCategoryId
vlanId
vlanName

Fraunhofer FOKUS (PEN: 12325)

NameCommunityBasicStandardPremium
APN
APNDownload
APNUpload
Bandwidth_of_CAP
Battery_lifetime_h
Battery_lifetime_min
Battery_status
bottleneck
Cell_id_number
Center_frequency
channel_status
cryptoInitVector
decryptionKey
destinationIPv4FanIn
encryptedData128
encryptedData256
endTime
flowCreationTimeUsec
flowEndTimeUsec
freq
geoLatitude
geoLongitude
GuaranteedDownload
GuaranteedUpload
ident
IMSI
Infrastructure_network_id
Infrastructure_network_type
interfaceDescripton
interfaceName
keyShare128
keyShare256
keyShareAdp
lostPackets
MaxDownload
MaxUpload
msg
msgId
msgValue
OR_terminal_id
OR_terminal_id_list
ORgeopositionElev
ORgeopositionLat
ORgeopositionLon
ORmodulation
ORmodulationOrder
ORmodulationType
ORpolicyRecord
ORprofileRecord
ORrolloffFactor
ORsignalBandwidth
ORsignalPower
ORsymbolRate
owd_usec
owdmax_usec
owdmean_usec
owdmin_usec
owdsd_usec
owdvar_usec
owdvarmax_nsec
owdvarmax_usec
owdvarmean_nsec
owdvarmean_usec
owdvarmin_nsec
owdvarmin_usec
packetArrivalMean
packetArrivalVar
pcapDrop
pcapRecv
pktId
pktLength
probeLocationName
probeName
procCpuSys
procCpuUser
procMemRss
procMemVzs
QCI
queueFillLevel
revOctetDeltaCount
revPacketDeltaCount
rtt_usec
rttmax_usec
rttmean_usec
rttmin_usec
RuleFlag
RuleID
RuleName
sensing_threshold
sensing_value
sessionId
sourceIPv4FanOut
Spectral_allocation_profile
Spectral_allocation_vector
startTime
sysCpuIdle
sysMemFree
sysMemTotal
taskId
tc_qlen
tcbacklog
tcBytes
tcDrops
tcOverlimits
tcPackets
tcRate_bps
tcRequeues
tcRrate_pps
transactionId
tstamp_nsec
tstamp_sec

INRIA (PEN: 12559)

NameCommunityBasicStandardPremium
civicLocationType
civicLocationValue
deviceId
geospatialLocationAlt
geospatialLocationCRSCode
geospatialLocationLat
geospatialLocationLng
geospatialLocationRadius
locationMethod
locationTime

Plixer (PEN: 13745)

NameCommunityBasicStandardPremium
client_hostname
client_ip
client_ip
connector_id
custom_data
date_time
directionality
encryption
event_id
internal_message_id
linked_msgid
message_info
message_subject
msgid
number_recipients
original_client_ip
original_server_ip
origination_time
partner_name
priority
recipient_address
recipient_report_status
reference
related_recipient_address
return_path
sender_address
server_hostname
server_ip
server_ip
service_version
source_component
source_context
tenant_id

Sandvine, was Procera Networks/Netintact (PEN: 15397)

NameCommunityBasicStandardPremium
sandvineApn
sandvineBaseService
sandvineContentCategories
sandvineDeviceId
sandvineExternalJitter
sandvineExternalRtt
sandvineFlowBehavior
sandvineGgsn
sandvineHttpContentType
sandvineHttpFileLength
sandvineHttpLanguage
sandvineHttpLocation
sandvineHttpReferer
sandvineHttpRequestMethod
sandvineHttpRequestVersion
sandvineHttpResponseStatus
sandvineHttpUrl
sandvineHttpUserAgent
sandvineImsi
sandvineIncomingDot1qPriorityLevel1
sandvineIncomingDot1qPriorityLevel2
sandvineIncomingDot1qPriorityLevel3
sandvineIncomingDot1qPriorityLevel4
sandvineIncomingDot1qVlanIdLevel1
sandvineIncomingDot1qVlanIdLevel2
sandvineIncomingDot1qVlanIdLevel3
sandvineIncomingDot1qVlanIdLevel4
sandvineIncomingDscp
sandvineIncomingOctets
sandvineIncomingPackets
sandvineIncomingShapingDrops
sandvineIncomingShapingLatency
sandvineInternalJitter
sandvineInternalRtt
sandvineLocalIPv4Host
sandvineLocalIPv6Host
sandvineMsisdn
sandvineOutgoingDot1qPriorityLevel1
sandvineOutgoingDot1qPriorityLevel2
sandvineOutgoingDot1qPriorityLevel3
sandvineOutgoingDot1qPriorityLevel4
sandvineOutgoingDot1qVlanIdLevel1
sandvineOutgoingDot1qVlanIdLevel2
sandvineOutgoingDot1qVlanIdLevel3
sandvineOutgoingDot1qVlanIdLevel4
sandvineOutgoingDscp
sandvineOutgoingOctets
sandvineOutgoingPackets
sandvineOutgoingShapingDrops
sandvineOutgoingShapingLatency
sandvineProperty
sandvineQoeIncomingExternal
sandvineQoeIncomingInternal
sandvineQoeOutgoingExternal
sandvineQoeOutgoingInternal
sandvineRat
sandvineRemoteGeoip
sandvineRemoteIPv4Host
sandvineRemoteIPv6Host
sandvineRnc
sandvineServerHostname
sandvineService
sandvineServiceObject
sandvineSgsn
sandvineSubscriberId
sandvineTemplateName
sandvineUserLocationInformation

Masaryk University (PEN: 16982)

NameCommunityBasicStandardPremium
appMatchLevel
appName
appPID
appUID
DELAY_AVG_US
DELAY_DEV_US
DELAY_MAX_US
DELAY_MIN_US
destinationGeo
HTTPContentType
HTTPDomain
HTTPHeaderCount
HTTPMethod
HTTPReferer
HTTPRequestAgent
HTTPRequestAgentID
HTTPRequestHost
HTTPRequestReferer
HTTPRequestType
HTTPRequestURL
HTTPResponseCode
HTTPResponseTime
HTTPResponseType
HTTPStatus
HTTPUrl
HTTPUserAgent
JITTER_AVG_US
JITTER_DEV_US
JITTER_MAX_US
JITTER_MIN_US
sourceGeo
SYN_SIZE
TCP_CRT_US
TCP_RTT_US
TCP_SRT_US
TCP_WIN_SIZE
tlsCerNotAfter
tlsCertIssuer
tlsCertNotBefore
tlsCertSubject
tlsCliCips
tlsCliVer
tlsPkeyAlgorithm
tlsPkeyExponent
tlsPkeyLength
tlsSerCips
tlsSerVer
tlsServerName
tunnelDestinationGeo
tunnelDstIPv6
tunnelDstPort
tunnelHOPLimit
tunnelICMPcode
tunnelOuterDestinationGeo
tunnelOuterSourceGeo
tunnelProtocol
tunnelSourceGeo
tunnelSrcIPv6
tunnelSrcPort
tunnelTCPFlags
tunnelTeredoHeaders
tunnelTeredoTrailers
tunnelType

netfilter/iptables project (PEN: 21373)

NameCommunityBasicStandardPremium
conntrack_id
mark

Palo Alto Networks (PEN: 25461)

NameCommunityBasicStandardPremium
App-ID
User-ID

Gigamon Systems (PEN: 26866)

NameCommunityBasicStandardPremium
CERT_Issuer
CERT_IssuerCname
CERT_SerialNo
CERT_SignatureAlgo
CERT_SignatureAlgoTxt
CERT_Subject
CERT_SubjectAlgo
CERT_SubjectAlgoTxt
CERT_SubjectAltName
CERT_SubjectCname
CERT_SubjectKeySize
CERT_ValidFrom
CERT_ValidTo
DNS_AddClass
DNS_AddClassTxt
DNS_AddName
DNS_AddRdata
DNS_AddRdlen
DNS_AddTTL
DNS_AddType
DNS_AddTypeTxt
DNS_AnCt
DNS_ArCt
DNS_AuthClass
DNS_AuthClassTxt
DNS_AuthName
DNS_AuthRdata
DNS_AuthRdlen
DNS_AuthTTL
DNS_AuthType
DNS_AuthTypeTxt
DNS_Bits
DNS_ID
DNS_NsCt
DNS_OPCODE
DNS_QdCt
DNS_QueryClass
DNS_QueryClassTxt
DNS_QueryName
DNS_QueryType
DNS_QueryTypeTxt
DNS_RespClass
DNS_RespClassTxt
DNS_RespCode
DNS_RespIPv4
DNS_RespIPv6
DNS_RespName
DNS_RespRdata
DNS_RespRdlen
DNS_RespTTL
DNS_RespType
DNS_RespTypeTxt
DnsResponseIpv4AddrText
HTTP_Host
HTTP_ReqMethod
HTTP_RespCode
HTTP_URL
HTTP_UserAgent
HTTP_Version
SERVER_Cipher
SERVER_CipherTxt
SERVER_CompressionMethod
SERVER_SessionId
SERVER_SNI
SERVER_Version
SERVER_VersionTxt

IPFIX Reverse Information Element Private Enterprise (PEN: 29305)

NameCommunityBasicStandardPremium
absoluteError
addressPoolHighThreshold
addressPoolLowThreshold
addressPortMappingHighThreshold
addressPortMappingLowThreshold
addressPortMappingPerUserHighThreshold
anonymizationFlags
anonymizationTechnique
applicationCategoryName
applicationDescription
applicationGroupName
applicationId
applicationName
applicationSubCategoryName
basicList
bgpCommunity
bgpDestinationAsNumber
bgpExtendedCommunity
bgpLargeCommunity
bgpNextAdjacentAsNumber
bgpNextHopIPv4Address
bgpNextHopIPv6Address
bgpPrevAdjacentAsNumber
bgpSourceAsNumber
bgpValidityState
classId
classificationEngineId
className
collectionTimeMilliseconds
collectorCertificate
confidenceLevel
connectionSumDurationSeconds
connectionTransactionId
dataLinkFrameSection
dataLinkFrameSize
dataLinkFrameType
dataRecordsReliability
deltaFlowCount
destinationIPv4Address
destinationIPv4Prefix
destinationIPv4PrefixLength
destinationIPv6Address
destinationIPv6Prefix
destinationIPv6PrefixLength
destinationMacAddress
destinationTransportPort
digestHashValue
distinctCountOfDestinationIPAddress
distinctCountOfDestinationIPv4Address
distinctCountOfDestinationIPv6Address
distinctCountOfSourceIPAddress
distinctCountOfSourceIPv4Address
distinctCountOfSourceIPv6Address
dot1qCustomerDEI
dot1qCustomerDestinationMacAddress
dot1qCustomerPriority
dot1qCustomerSourceMacAddress
dot1qCustomerVlanId
dot1qDEI
dot1qPriority
dot1qServiceInstanceId
dot1qServiceInstancePriority
dot1qServiceInstanceTag
dot1qVlanId
droppedLayer2OctetDeltaCount
droppedLayer2OctetTotalCount
droppedOctetDeltaCount
droppedOctetTotalCount
droppedPacketDeltaCount
droppedPacketTotalCount
dstTrafficIndex
egressBroadcastPacketTotalCount
egressInterface
egressInterfaceType
egressPhysicalInterface
egressUnicastPacketTotalCount
egressVRFID
encryptedTechnology
engineId
engineType
ethernetHeaderLength
ethernetPayloadLength
ethernetTotalLength
ethernetType
exporterCertificate
exportingProcessId
exportSctpStreamId
externalAddressRealm
firewallEvent
flagsAndSamplerId
flowActiveTimeout
flowDirection
flowDurationMicroseconds
flowDurationMilliseconds
flowEndDeltaMicroseconds
flowEndMicroseconds
flowEndMilliseconds
flowEndNanoseconds
flowEndReason
flowEndSeconds
flowEndSysUpTime
flowIdleTimeout
flowLabelIPv6
flowSamplingTimeInterval
flowSamplingTimeSpacing
flowSelectedFlowDeltaCount
flowSelectedOctetDeltaCount
flowSelectedPacketDeltaCount
flowSelectorAlgorithm
flowStartDeltaMicroseconds
flowStartMicroseconds
flowStartMilliseconds
flowStartNanoseconds
flowStartSeconds
flowStartSysUpTime
forwardingStatus
fragmentFlags
fragmentIdentification
fragmentOffset
globalAddressMappingHighThreshold
greKey
hashDigestOutput
hashFlowDomain
hashInitialiserValue
hashIPPayloadOffset
hashIPPayloadSize
hashOutputRangeMax
hashOutputRangeMin
hashSelectedRangeMax
hashSelectedRangeMin
httpContentType
httpMessageVersion
httpReasonPhrase
httpRequestHost
httpRequestMethod
httpRequestTarget
httpStatusCode
httpUserAgent
icmpCodeIPv4
icmpCodeIPv6
icmpTypeCodeIPv4
icmpTypeCodeIPv6
icmpTypeIPv4
icmpTypeIPv6
igmpType
ignoredDataRecordTotalCount
ignoredLayer2FrameTotalCount
ignoredLayer2OctetTotalCount
informationElementDataType
informationElementDescription
informationElementId
informationElementIndex
informationElementName
informationElementRangeBegin
informationElementRangeEnd
informationElementSemantics
informationElementUnits
ingressBroadcastPacketTotalCount
ingressInterface
ingressInterfaceType
ingressMulticastPacketTotalCount
ingressPhysicalInterface
ingressUnicastPacketTotalCount
ingressVRFID
initiatorOctets
initiatorPackets
interfaceDescription
interfaceName
intermediateProcessId
internalAddressRealm
ipClassOfService
ipDiffServCodePoint
ipHeaderLength
ipHeaderPacketSection
ipNextHopIPv4Address
ipNextHopIPv6Address
ipPayloadLength
ipPayloadPacketSection
ipPrecedence
IPSecSPI
ipTotalLength
ipTTL
ipv4IHL
ipv4Options
ipv4RouterSc
ipv6ExtensionHeaders
ipVersion
isMulticast
layer2FrameDeltaCount
layer2FrameTotalCount
layer2OctetDeltaCount
layer2OctetDeltaSumOfSquares
layer2OctetTotalCount
layer2OctetTotalCount
layer2OctetTotalSumOfSquares
layer2packetSectionData
layer2packetSectionOffset
layer2packetSectionSize
layer2SegmentId
lineCardId
lowerCILimit
maxBIBEntries
maxEntriesPerUser
maxExportSeconds
maxFlowEndMicroseconds
maxFlowEndMilliseconds
maxFlowEndNanoseconds
maxFlowEndSeconds
maxFragmentsPendingReassembly
maximumIpTotalLength
maximumLayer2TotalLength
maximumTTL
maxSessionEntries
maxSubscribers
messageMD5Checksum
messageScope
meteringProcessId
metroEvcId
metroEvcType
minExportSeconds
minFlowStartMicroseconds
minFlowStartMilliseconds
minFlowStartNanoseconds
minFlowStartSeconds
minimumIpTotalLength
minimumLayer2TotalLength
minimumTTL
mobileIMSI
mobileMSISDN
monitoringIntervalEndMilliSeconds
monitoringIntervalStartMilliSeconds
mplsLabelStackDepth
mplsLabelStackLength
mplsLabelStackSection
mplsLabelStackSection10
mplsLabelStackSection2
mplsLabelStackSection3
mplsLabelStackSection4
mplsLabelStackSection5
mplsLabelStackSection6
mplsLabelStackSection7
mplsLabelStackSection8
mplsLabelStackSection9
mplsPayloadLength
mplsPayloadPacketSection
mplsTopLabelExp
mplsTopLabelIPv4Address
mplsTopLabelIPv6Address
mplsTopLabelPrefixLength
mplsTopLabelStackSection
mplsTopLabelTTL
mplsTopLabelType
mplsVpnRouteDistinguisher
multicastReplicationFactor
natEvent
natInstanceID
natOriginatingAddressRealm
natPoolId
natPoolName
natQuotaExceededEvent
natThresholdEvent
natType
newConnectionDeltaCount
nextHeaderIPv6
notSentLayer2OctetTotalCount
observationDomainName
observationPointId
observationPointType
observationTimeMicroseconds
observationTimeMilliseconds
observationTimeNanoseconds
observationTimeSeconds
octetDeltaCount
octetDeltaSumOfSquares
octetTotalCount
octetTotalSumOfSquares
opaqueOctets
originalExporterIPv4Address
originalExporterIPv6Address
originalFlowsCompleted
originalFlowsInitiated
originalFlowsPresent
originalObservationDomainId
p2pTechnology
packetDeltaCount
packetTotalCount
payloadLengthIPv6
portId
portRangeEnd
portRangeNumPorts
portRangeStart
portRangeStepSize
postDestinationMacAddress
postDot1qCustomerVlanId
postDot1qVlanId
postIpClassOfService
postIpDiffServCodePoint
postIpPrecedence
postLayer2OctetDeltaCount
postLayer2OctetTotalCount
postMCastLayer2OctetDeltaCount
postMCastLayer2OctetTotalCount
postMCastOctetDeltaCount
postMCastOctetTotalCount
postMCastPacketDeltaCount
postMCastPacketTotalCount
postMplsTopLabelExp
postNAPTDestinationTransportPort
postNAPTSourceTransportPort
postNATDestinationIPv4Address
postNATDestinationIPv6Address
postNATSourceIPv4Address
postNATSourceIPv6Address
postOctetDeltaCount
postOctetTotalCount
postPacketDeltaCount
postPacketTotalCount
postSourceMacAddress
postVlanId
privateEnterpriseNumber
protocolIdentifier
pseudoWireControlWord
pseudoWireDestinationIPv4Address
pseudoWireId
pseudoWireType
relativeError
responderOctets
responderPackets
rfc3550JitterMicroseconds
rfc3550JitterMilliseconds
rfc3550JitterNanoseconds
rtpSequenceNumber
samplerId
samplerMode
samplerName
samplerRandomInterval
samplingAlgorithm
samplingFlowInterval
samplingFlowSpacing
samplingInterval
samplingPacketInterval
samplingPacketSpace
samplingPopulation
samplingProbability
samplingSize
samplingTimeInterval
samplingTimeSpace
sectionExportedOctets
sectionOffset
selectionSequenceId
selectorAlgorithm
selectorId
selectorIDTotalFlowsObserved
selectorIDTotalFlowsSelected
selectorIdTotalPktsObserved
selectorIdTotalPktsSelected
selectorName
sessionScope
sourceIPv4Address
sourceIPv4Prefix
sourceIPv4PrefixLength
sourceIPv6Address
sourceIPv6Prefix
sourceIPv6PrefixLength
sourceMacAddress
sourceTransportPort
sourceTransportPortsLimit
srcTrafficIndex
staIPv4Address
staMacAddress
subTemplateList
subTemplateMultiList
systemInitTimeMilliseconds
tcpAcknowledgementNumber
tcpAckTotalCount
tcpControlBits
tcpDestinationPort
tcpFinTotalCount
tcpHeaderLength
tcpOptions
tcpPshTotalCount
tcpRstTotalCount
tcpSequenceNumber
tcpSourcePort
tcpSynTotalCount
tcpUrgentPointer
tcpUrgTotalCount
tcpWindowScale
tcpWindowSize
totalLengthIPv4
transportOctetDeltaCount
transportPacketDeltaCount
tunnelTechnology
udpDestinationPort
udpMessageLength
udpSourcePort
upperCILimit
userName
valueDistributionMethod
virtualStationInterfaceId
virtualStationInterfaceName
virtualStationName
virtualStationUUID
vlanId
vpnIdentifier
VRFname
wlanChannelId
wlanSSID
wtpMacAddress

Cubro (PEN: 32182)

NameCommunityBasicStandardPremium
appID

CACE Technologies (PEN: 32622)

Name | Community | Basic | Standard | Premium

NameCommunityBasicStandardPremium
caceLocalICMPid
caceLocalIPv4Address
caceLocalIPv4id
caceLocalIPv6Address
caceLocalProcessCommand
caceLocalProcessId
caceLocalProcessUserId
caceLocalProcessUserName
caceLocalTransportPort
caceRemoteIPv4Address
caceRemoteIPv6Address
caceRemoteTransportPort

FastIP/Boundary (PEN: 33610)

NameCommunityBasicStandardPremium
APP_RTT_USEC
BOND_INTERFACE_ID
BOND_INTERFACE_MODE
BOND_INTERFACE_PHYSICAL_NIC_COUNT
COLLISIONS
EPOCH_SECOND
ERRORS
METER_OS_DISTRIBUTION_NAME
METER_OS_MACHINE
METER_OS_NODENAME
METER_OS_RELEASE
METER_OS_SYSNAME
METER_OS_VERSION
METER_VERSION
NIC_DRIVER_NAME
NIC_DRIVER_VERSION
NIC_FIRMWARE_VERSION
NIC_ID
NIC_IP
NIC_MAC
NIC_NAME
TCP_FLAGS
TCP_HANDSHAKE_RTT_USEC

trammell.ch (PEN: 35566)

NameCommunityBasicStandardPremium
sipAuthUsername
sipCallId
sipClientTransaction
sipContactURI
sipExpires
sipFromTag
sipFromURI
sipMethod
sipObservationType
sipPAccessNetworkInfo
sipPaiURI
sipPaiURI
sipPAssocURI
sipPCalledPartyURI
sipPChargingFunctionAddr
sipPChargingVector
sipPpiURI
sipPVisitedNetworkID
sipRequestURI
sipResponseStatus
sipRouteURI
sipSequenceNumber
sipServerTransaction
sipSessionIdCode
sipSubscriptionEvent
sipSubscriptionState
sipToTag
sipToURI
sipUsername
sipVia

ntop (PEN: 35632)

NameCommunityBasicStandardPremium
APPL_LATENCY_MS
APPLICATION_NAME
BITTORRENT_HASH
CLIENT_NW_LATENCY_MS
CLIENT_TCP_FLAGS
CUMULATIVE_ICMP_TYPE
DHCP_CLIENT_IP
DHCP_CLIENT_MAC
DHCP_CLIENT_NAME
DHCP_MESSAGE_TYPE
DHCP_REMOTE_ID
DHCP_SUBSCRIBER_ID
DIAMETER_CALLED_PARTY_ADDRESS
DIAMETER_CALLED_STATION_ID
DIAMETER_CALLING_PARTY_ADDRESS
DIAMETER_CALLING_STATION_ID
DIAMETER_CLR_CANCEL_TYPE
DIAMETER_CLR_FLAGS
DIAMETER_EXP_RES_RESULT_CODE
DIAMETER_EXP_RES_VENDOR_ID
DIAMETER_FRAMED_IP_ADDR
DIAMETER_HOP_BY_HOP_ID
DIAMETER_PDP_ADDR
DIAMETER_REQ_MSG_TYPE
DIAMETER_REQ_ORIGIN_HOST
DIAMETER_REQ_USER_NAME
DIAMETER_RSP_MSG_TYPE
DIAMETER_RSP_ORIGIN_HOST
DIAMETER_RSP_RESULT_CODE
DIAMETER_SERVED_IP_ADDR
DIAMETER_SUBSCRIPTION_ID
DICOM_DEVICE_SERIAL
DICOM_IMPL_UID
DICOM_IMPL_VERSION
DICOM_INST_ADDR
DICOM_INST_NAME
DICOM_MANUFACTURER
DICOM_MODALITY
DICOM_STATION_NAME
DICOM_SW_VERSION
DNS_NUM_ANSWERS
DNS_QUERY
DNS_QUERY_ID
DNS_QUERY_TYPE
DNS_RESPONSE
DNS_RET_CODE
DNS_TTL_ANSWER
DOWNSTREAM_SESSION_ID
DOWNSTREAM_TUNNEL_ID
DST_AS_MAP
DST_AS_PATH_1
DST_AS_PATH_10
DST_AS_PATH_2
DST_AS_PATH_3
DST_AS_PATH_4
DST_AS_PATH_5
DST_AS_PATH_6
DST_AS_PATH_7
DST_AS_PATH_8
DST_AS_PATH_9
DST_FATHER_PROC_NAME
DST_FATHER_PROC_PID
DST_FRAGMENTS
DST_HOST_NAME
DST_IP_CITY
DST_IP_COUNTRY
DST_IP_LAT
DST_IP_LONG
DST_PROC_ACTUAL_MEMORY
DST_PROC_AVERAGE_CPU_LOAD
DST_PROC_NAME
DST_PROC_NUM_PAGE_FAULTS
DST_PROC_PCTG_IOWAIT
DST_PROC_PEAK_MEMORY
DST_PROC_PID
DST_PROC_UID
DST_PROC_USER_NAME
DST_TO_SRC_AVG_THROUGHPUT
DST_TO_SRC_MAX_THROUGHPUT
DST_TO_SRC_MIN_THROUGHPUT
DST_TO_SRC_SECOND_BYTES
DURATION_IN
DURATION_OUT
ENTROPY_CLIENT_BYTES
ENTROPY_SERVER_BYTES
EPP_CMD
EPP_CMD_ARGS
EPP_REASON_STR
EPP_REGISTRAR_NAME
EPP_RSP_CODE
EPP_SERVER_NAME
FLOW_PROTO_PORT
FLOW_SERVER_NAME
FLOW_USER_NAME
FTP_COMMAND
FTP_COMMAND_RET_CODE
FTP_LOGIN
FTP_PASSWORD
GTPV0_APN_NAME
GTPV0_END_USER_IP
GTPV0_END_USER_MSISDN
GTPV0_RAI_CELL_LAC
GTPV0_RAI_CELL_RAC
GTPV0_RAI_MCC
GTPV0_RAI_MNC
GTPV0_REQ_MSG_TYPE
GTPV0_RESPONSE_CAUSE
GTPV0_RSP_MSG_TYPE
GTPV0_TID
GTPV1_APN_NAME
GTPV1_C2S_TEID_CTRL
GTPV1_C2S_TEID_DATA
GTPV1_END_USER_IMEI
GTPV1_END_USER_IMSI
GTPV1_END_USER_IP
GTPV1_END_USER_MSISDN
GTPV1_RAI_LAC
GTPV1_RAI_MCC
GTPV1_RAI_MNC
GTPV1_RAI_RAC
GTPV1_RAT_TYPE
GTPV1_REQ_MSG_TYPE
GTPV1_RESPONSE_CAUSE
GTPV1_RSP_MSG_TYPE
GTPV1_S2C_TEID_CTRL
GTPV1_S2C_TEID_DATA
GTPV1_ULI_CELL_CI
GTPV1_ULI_CELL_LAC
GTPV1_ULI_MCC
GTPV1_ULI_MNC
GTPV1_ULI_SAC
GTPV2_APN_NAME
GTPV2_C2S_S1U_GTPU_IP
GTPV2_C2S_S1U_GTPU_TEID
GTPV2_C2S_S5_S8_GTPC_IP
GTPV2_C2S_S5_S8_GTPU_IP
GTPV2_C2S_S5_S8_GTPU_TEID
GTPV2_C2S_S5_S8_SGW_GTPU_IP
GTPV2_C2S_S5_S8_SGW_GTPU_TEID
GTPV2_END_USER_IMEI
GTPV2_END_USER_IMSI
GTPV2_END_USER_MSISDN
GTPV2_PDN_IP
GTPV2_RAT_TYPE
GTPV2_REQ_MSG_TYPE
GTPV2_RESPONSE_CAUSE
GTPV2_RSP_MSG_TYPE
GTPV2_S2C_S1U_GTPU_IP
GTPV2_S2C_S1U_GTPU_TEID
GTPV2_S2C_S5_S8_GTPC_IP
GTPV2_S2C_S5_S8_GTPU_IP
GTPV2_S2C_S5_S8_GTPU_TEID
GTPV2_S2C_S5_S8_SGW_GTPU_IP
GTPV2_S2C_S5_S8_SGW_GTPU_TEID
GTPV2_S5_S8_GTPC_TEID
GTPV2_ULI_CELL_ID
GTPV2_ULI_CELL_TAC
GTPV2_ULI_MCC
GTPV2_ULI_MNC
HASSH_CLIENT
HASSH_SERVER
HTTP_HOST
HTTP_METHOD
HTTP_MIME
HTTP_REFERER
HTTP_RET_CODE
HTTP_SITE
HTTP_UA
HTTP_URL
HTTP_VIA
HTTP_X_FORWARDED_FOR
IMAP_LOGIN
IN_SRC_OSI_SAP
JA3C_HASH
JA3S_HASH
L4_DST_PORT_MAP
L4_SRC_PORT_MAP
L4_SRV_PORT
L4_SRV_PORT_MAP
L7_PROTO
L7_PROTO
L7_PROTO_CATEGORY
L7_PROTO_NAME
LONGEST_FLOW_PKT
MYSQL_APPL_LATENCY_USEC
MYSQL_DB
MYSQL_QUERY
MYSQL_RESPONSE
MYSQL_SERVER_VERSION
MYSQL_USERNAME
NETBIOS_QUERY_NAME
NETBIOS_QUERY_OS
NETBIOS_QUERY_TYPE
NETBIOS_RESPONSE
NPROBE_IPV4_ADDRESS
NUM_PKTS_1024_TO_1514_BYTES
NUM_PKTS_128_TO_256_BYTES
NUM_PKTS_256_TO_512_BYTES
NUM_PKTS_512_TO_1024_BYTES
NUM_PKTS_OVER_1514_BYTES
NUM_PKTS_TTL_128_160
NUM_PKTS_TTL_160_192
NUM_PKTS_TTL_192_224
NUM_PKTS_TTL_2_5
NUM_PKTS_TTL_224_255
NUM_PKTS_TTL_5_32
NUM_PKTS_TTL_64_96
NUM_PKTS_TTL_64_96
NUM_PKTS_TTL_96_128
NUM_PKTS_TTL_EQ_1
NUM_PKTS_UP_TO_128_BYTES
OOORDER_IN_PKTS
OOORDER_OUT_PKTS
ORACLE_QUERY
ORACLE_QUERY_DURATION
ORACLE_RSP_CODE
ORACLE_RSP_STRING
ORACLE_USERNAME
OUT_DST_OSI_SAP
PAYLOAD_HASH
PKT_VECTOR
PLUGIN_NAME
POP_USER
PROTOCOL_MAP
RADIUS_ACCT_IN_OCTETS
RADIUS_ACCT_IN_PKTS
RADIUS_ACCT_OUT_OCTETS
RADIUS_ACCT_OUT_PKTS
RADIUS_ACCT_SESSION_ID
RADIUS_ACCT_STATUS_TYPE
RADIUS_CALLED_STATION_ID
RADIUS_CALLING_STATION_ID
RADIUS_FRAMED_IP_ADDR
RADIUS_NAS_IDENTIFIER
RADIUS_NAS_IP_ADDR
RADIUS_REQ_MSG_TYPE
RADIUS_RSP_MSG_TYPE
RADIUS_USER_IMEI
RADIUS_USER_IMSI
RADIUS_USER_NAME
RETRANSMITTED_IN_BYTES
RETRANSMITTED_IN_PKTS
RETRANSMITTED_OUT_BYTES
RETRANSMITTED_OUT_PKTS
RTP_DTMF_TONES
RTP_FIRST_SEQ
RTP_FIRST_TS
RTP_IN_JITTER
RTP_IN_MAX_DELTA
RTP_IN_MOS
RTP_IN_PAYLOAD_TYPE
RTP_IN_PKT_DROP
RTP_IN_PKT_LOST
RTP_IN_R_FACTOR
RTP_IN_TRANSIT
RTP_LAST_SEQ
RTP_LAST_TS
RTP_MOS
RTP_OUT_JITTER
RTP_OUT_MAX_DELTA
RTP_OUT_MOS
RTP_OUT_PAYLOAD_TYPE
RTP_OUT_PKT_DROP
RTP_OUT_PKT_LOST
RTP_OUT_R_FACTOR
RTP_OUT_TRANSIT
RTP_R_FACTOR
RTP_RTT
RTP_SIP_CALL_ID
RTP_SSRC
S1AP_CAUSE_ENB_TO_MME
S1AP_DETAILED_CAUSE_ENB_TO_MME
S1AP_ENB_UE_S1AP_ID
S1AP_MME_UE_S1AP_ID
S1AP_MSG_EMM_TYPE_ENB_TO_MME
S1AP_MSG_EMM_TYPE_MME_TO_ENB
S1AP_MSG_ESM_TYPE_ENB_TO_MME
S1AP_MSG_ESM_TYPE_MME_TO_ENB
SEQ_PLEN
SEQ_PLEN_HASH
SEQ_TDIFF
SEQ_TDIFF_HASH
SERVER_NW_LATENCY_MS
SERVER_TCP_FLAGS
SHORTEST_FLOW_PKT
SIP_BYE_OK_TIME
SIP_BYE_TIME
SIP_C_IP
SIP_CALL_ID
SIP_CALL_STATE
SIP_CALLED_PARTY
SIP_CALLING_PARTY
SIP_CANCEL_OK_TIME
SIP_CANCEL_TIME
SIP_INVITE_FAILURE_TIME
SIP_INVITE_OK_TIME
SIP_INVITE_TIME
SIP_REASON_CAUSE
SIP_RESPONSE_CODE
SIP_RINGING_TIME
SIP_RTP_CODECS
SIP_RTP_IPV4_DST_ADDR
SIP_RTP_IPV4_SRC_ADDR
SIP_RTP_L4_DST_PORT
SIP_RTP_L4_SRC_PORT
SIP_TRYING_TIME
SIP_UAC
SIP_UAS
SMTP_MAIL_FROM
SMTP_RCPT_TO
SRC_AS_MAP
SRC_AS_PATH_1
SRC_AS_PATH_10
SRC_AS_PATH_2
SRC_AS_PATH_3
SRC_AS_PATH_4
SRC_AS_PATH_5
SRC_AS_PATH_6
SRC_AS_PATH_7
SRC_AS_PATH_8
SRC_AS_PATH_9
SRC_FATHER_PROC_NAME
SRC_FATHER_PROC_PID
SRC_FRAGMENTS
SRC_HOST_NAME
SRC_IP_CITY
SRC_IP_COUNTRY
SRC_IP_LAT
SRC_IP_LONG
SRC_PROC_ACTUAL_MEMORY
SRC_PROC_AVERAGE_CPU_LOAD
SRC_PROC_NAME
SRC_PROC_NUM_PAGE_FAULTS
SRC_PROC_PCTG_IOWAIT
SRC_PROC_PEAK_MEMORY
SRC_PROC_PID
SRC_PROC_UID
SRC_PROC_USER_NAME
SRC_TO_DST_AVG_THROUGHPUT
SRC_TO_DST_MAX_THROUGHPUT
SRC_TO_DST_MIN_THROUGHPUT
SRC_TO_DST_SECOND_BYTES
SSDP_HOST
SSDP_METHOD
SSDP_SERVER
SSDP_TYPE
SSDP_USN
SSL_CIPHER
SSL_SERVER_NAME
SSL_UNSAFE_CIPHER
SSL_VERSION
TCP_WIN_MAX_IN
TCP_WIN_MAX_OUT
TCP_WIN_MIN_IN
TCP_WIN_MIN_OUT
TCP_WIN_MSS_IN
TCP_WIN_MSS_OUT
TCP_WIN_SCALE_IN
TCP_WIN_SCALE_OUT
UNTUNNELED_IPV4_DST_ADDR
UNTUNNELED_IPV4_SRC_ADDR
UNTUNNELED_IPV6_DST_ADDR
UNTUNNELED_IPV6_SRC_ADDR
UNTUNNELED_L4_DST_PORT
UNTUNNELED_L4_SRC_PORT
UNTUNNELED_PROTOCOL
UPSTREAM_SESSION_ID
UPSTREAM_TUNNEL_ID
USER_NAME
WHOIS_DAS_DOMAIN

INVEA-TECH/FlowMon Networks (PEN: 39499)

NameCommunityBasicStandardPremium
arpHrd
arpOp
coapAccept
coapCode
coapContentFormat
coapMid
coapOptionsCount
coapToken
coapTokenLength
coapType
coapUriHost
coapUriPath
coapUriQuery
coapVersion
dhcpDomainName
dhcpHostMacAddr
dhcpHostName
dhcpIpLeaseTime
dhcpIpRequest
dhcpOfferedIp
dhcpServerIp
dhcpType
dlms_action_result
dlms_attr_method_id
dlms_class_id
dlms_data_access_result
dlms_data_length
dlms_data_type
dlms_obis
dlms_subtype
dlms_type
dnsAddtrecCount
dnsAnswrecCount
dnsAuthrecCount
dnsCrrClass
dnsCrrName
dnsCrrRdata
dnsCrrRdataLen
dnsCrrTtl
dnsCrrType
dnsFlagsCodes
dnsId
dnsQclass
dnsQname
dnsQtype
dnsQuestionCount
EGRESS_ACL_ID
FW_EXT_EVENT
gooseCocbRef
gooseDataset
gooseGocbRef
gooseGoID
gooseStNum
HTTPRequestAgent
HTTPRequestAgentID
HTTPRequestHost
HTTPRequestReferer
HTTPRequestType
HTTPRequestURL
HTTPResponseCode
HTTPResponseType
httpUaApp
httpUaAppBld
httpUaAppMaj
httpUaAppMin
httpUaOs
httpUaOsBld
httpUaOsMaj
httpUaOsMin
iec104AsduAddress
iec104AsduCot
iec104AsduObjCount
iec104AsduOrg
iec104AsduType
iec104FrameFmt
iec104PktLength
INGRESS_ACL_ID
mailFailedAuthenticationCount
mailIsEncrypted
mailUsername
mms_conf_service_req
mms_conf_service_resp
mms_type
mms_unconf_service
mysqlAuthMethodName
mysqlCapabilitiesClient
mysqlCapabilitiesServer
mysqlCommand
mysqlDatabase
mysqlErrorCode
mysqlProtocolVersion
mysqlQuery
mysqlServerVersion
mysqlUserAuthenticated
mysqlUsername
NPMDelayAvg
NPMDelayDev
NPMDelayMax
NPMDelayMin
NPMJitterAvg
NPMJitterDev
NPMJitterMax
NPMJitterMin
NPMRoundTripTime
NPMServerResponseTime
NPMTCPOutOfOrder
NPMTCPRetransmission
pgsqlAuthMethod
pgsqlDatabase
pgsqlErrorSeverity
pgsqlErrorSqlstate
pgsqlMsgTypeClient
pgsqlMsgTypeServer
pgsqlProtocolVersion
pgsqlServerVersion
pgsqlSqlQuery
pgsqlUsername
rtcpLost
rtcpOctets
rtcpPackets
rtcpSourceCount
rtpCodec
rtpJitter
sipByeTime
sipCalledParty
sipCallId
sipCallingParty
sipCSeq
sipInviteRingingTime
sipOkTime
sipRequestUri
sipRtpAudio
sipRtpIp4
sipRtpIp6
sipRtpVideo
sipStats
sipUserAgent
sipVia
smbCmd
smbFile
smbFileType
smbOp
smbTree
smtpEhloHelo
smtpMailFrom
tcpSynSize
tcpSynTtl
tdsClientVersion
tdsDatabase
tdsEnchangeType
tdsErrorCode
tdsHostname
tdsRequestType
tdsResponseType
tdsRpcName
tdsServerName
tdsServerVersion
tdsSqlQuery
tdsTmrType
tdsToken
tdsUsername
tdsVersion
tlsAlpn
tlsCipherSuite
tlsCipherSuites
tlsClientKeyLength
tlsClientRandom
tlsClientSessionId
tlsClientVersion
tlsContentType
tlsEcPointFormats
tlsEllipticCurves
tlsExtensionLengths
tlsExtensionTypes
tlsHandshakeType
tlsIssuerCn
tlsJa3Fingerprint
tlsPublicKeyAlg
tlsPublicKeyLength
tlsServerRandom
tlsServerSessionId
tlsServerVersion
tlsSetupTime
tlsSignatureAlg
tlsSni
tlsSniLength
tlsSubjectCn
tlsSubjectOn
tlsValidityNotAfter
tlsValidityNotBefore
username
voipPacketType
xlateDestinationAddressIPV4
xlateDestinationPort
xlateSourceAddressIPV4
xlateSourcePort

A10 Networks (PEN: 40842)

NameCommunityBasicStandardPremium
cgn-flow-direction
Custom1
Custom2
Custom3
DestZone
flowDurationMilliseconds64
fwDenyReset
fwdTupleType
fwdVNPID
mobileIMEI
revTupleType
revVNPID
RuleName
RuleSetName
SourceZone

vIPtela, now Cisco (PEN: 41916)

NameCommunityBasicStandardPremium
App_Identifier
VPN_Identifier

pmacct (PEN: 43874)

NameCommunityBasicStandardPremium
tag1
tag2
tag3
tag4

Ziften Technologies (PEN: 44619)

NameCommunityBasicStandardPremium
ZAccountId
ZAgentGUID
ZBaseFilename
ZCommandName
ZCommandName
ZFileSigAlgo
ZFileSigAlgoChar
ZFileSignature
ZHostname
ZImagePath
ZInbound
ZModTimeSeconds
ZParentFileSignature
ZParentImagePath
ZParentPid
ZPid
ZPlatform
ZUserSID

RedSocks (PEN: 44913)

NameCommunityBasicStandardPremium
http_req_host
http_req_url
http_req_user_agent
orig_dst_ip
orig_dst_ip
orig_dst_port
orig_src_ip
orig_src_ip
orig_src_port

Velocloud Networks, now VMware (PEN: 45346)

NameCommunityBasicStandardPremium
avgLatencyRxMs
avgLatencyTxMs
bizPolicyId
destinationUUID
firewallId
interfaceType
jitterRxMs
jitterTxMs
linkName
linkUUID
lostPacketsRxDeltaCount
nextHopUUID
packetsLostDeltaTxCount
primaryIpv4Address
replicatedPacketsRxDeltaCount
replicatedPacketsTxDeltaCount
retransmittedPacketsTxDeltaCount
rxLossPercent
txLossPercent
vcFlowPath
vcLinkPolicy
vcPriority
vcRouteType
vcTrafficType

Cognitix (PEN: 45480)

NameCommunityBasicStandardPremium
cognitixCountryDestination
cognitixCountrySource
cognitixDpiApplication
cognitixDpiClassification
cognitixDpiInSslClassification
cognitixDpiProtocol
cognitixDpiSrcOS
cognitixDstAssetId
cognitixDstLocation
cognitixFileTransferFilename
cognitixIocFeedId
cognitixIocFeedName
cognitixIocValue
cognitixIocValueType
cognitixIPSRuleId
cognitixLogSeverity
cognitixPolicyId
cognitixPolicyName
cognitixPolicyRuleAction
cognitixPolicyRuleId
cognitixPolicyRuleName
cognitixSrcAssetId
cognitixSrcLocation
cognitixUrl
cognitixUrlCategory
cognitixUrlReputation
cognitixUserId

Pluribus Networks (PEN: 47269)

NameCommunityBasicStandardPremium
LatencyMicroseconds

Niagara Networks (PEN: 47729)

Name | Community | Basic | Standard | Premium

NameCommunityBasicStandardPremium
DnsAdditionalClass
DnsAdditionalClassText
DnsAdditionalName
DnsAdditionalRData
DnsAdditionalRDLength
DnsAdditionalTTL
DnsAdditionalType
DnsAdditionalTypeText
DnsANCount
DnsARCount
DnsAuthorityClass
DnsAuthorityClassText
DnsAuthorityName
DnsAuthorityRData
DnsAuthorityRDLength
DnsAuthorityTTL
DnsAuthorityType
DnsAuthorityTypeText
DnsBits
DnsIdentifier
DnsNSCount
DnsOpCode
DnsQDCount
DnsQueryClass
DnsQueryClassText
DnsQueryName
DnsQueryType
DnsQueryTypeText
DnsResponseClass
DnsResponseClassText
DnsResponseCode
DnsResponseIPv4Addr
DnsResponseIPv4AddrText
DnsResponseIPv6Addr
DnsResponseIPv6AddrText
DnsResponseName
DnsResponseRData
DnsResponseRDLength
DnsResponseTTL
DnsResponseType
DnsResponseTypeText
RadiusAcctInOctets
RadiusAcctInPackets
RadiusAcctOutOctets
RadiusAcctOutPackets
RadiusAcctSessionId
RadiusAcctStatusType
RadiusAuthenticator
RadiusCalledStationId
RadiusCallingStationId
RadiusFramedIpAddress
RadiusFramedIpv6Address
RadiusNasIdentifier
RadiusNasIpAddress
RadiusNasIpv6Address
RadiusPacketIdentifier
RadiusPacketTypeCode
RadiusPacketTypeCodeText
RadiusUserName
RadiusVsaId
RadiusVsaName
RadiusVsaValue
RadiusVsaVendorId
SslCertificateIssuer
SslCertificateIssuerName
SslCertificateSerialNumber
SslCertificateSha1
SslCertificateSignatureAlgorithm
SslCertificateSignatureAlgorithmText
SslCertificateSubject
SslCertificateSubjectAlgorithmText
SslCertificateSubjectAlternativeName
SslCertificateSubjectName
SslCertificateSubjectPublicAlgorithm
SslCertificateSubjectPublicAlgorithmText
SslCertificateSubjectPublicKeySize
SslCertificateValidNotAfter
SslCertificateValidNotBefore
SslConnectionEncryptionType
SslServerCipher
SslServerCipherText
SslServerCompressionMethod
SslServerNameIndication
SslServerSessionId
SslServerVersion
SslServerVersionText

Pensando Systems (PEN: 51886)

NameCommunityBasicStandardPremium
egress-interface-type
egress-logical-interface
flow-state-index
pen1
role
tcp-exceptions
tcp-rtt
tcp-state
tcp-win-mss

Project Antrea/VMware (PEN: 56506)

NameCommunityBasicStandardPremium
destinationClusterIPv4
destinationClusterIPv6
destinationNodeName
destinationPodName
destinationPodNamespace
destinationServicePort
destinationServicePortName
egressNetworkPolicyName
egressNetworkPolicyNamespace
egressNetworkPolicyRulePriority
egressNetworkPolicyType
egressNetworkPolicyUID
flowEndSecondsFromDestinationNode
flowEndSecondsFromSourceNode
ingressNetworkPolicyName
ingressNetworkPolicyNamespace
ingressNetworkPolicyRulePriority
ingressNetworkPolicyType
ingressNetworkPolicyUID
octetDeltaCountFromDestinationNode
octetDeltaCountFromSourceNode
octetTotalCountFromDestinationNode
octetTotalCountFromSourceNode
packetDeltaCountFromDestinationNode
packetDeltaCountFromSourceNode
packetTotalCountFromDestinationNode
packetTotalCountFromSourceNode
reverseOctetDeltaCountFromDestinationNode
reverseOctetDeltaCountFromSourceNode
reverseOctetTotalCountFromDestinationNode
reverseOctetTotalCountFromSourceNode
reversePacketDeltaCountFromDestinationNode
reversePacketDeltaCountFromSourceNode
reversePacketTotalCountFromDestinationNode
reversePacketTotalCountFromSourceNode
reverseThroughput
reverseThroughputFromDestinationNode
reverseThroughputFromSourceNode
sourceNodeName
sourcePodName
sourcePodNamespace
throughput
throughputFromDestinationNode
throughputFromSourceNode