sFlow IEs
NetObserv Flow supports the following sFlow information elements (IE).
PEN | Sample Type | Vendor | IEs |
---|---|---|---|
0 | flow_data | flow_sample | 10 |
0 | flow_data | sampled_header | 160 |
0 | flow_data | sampled_ethernet | 3 |
0 | flow_data | sampled_ipv4 | 7 |
0 | flow_data | sampled_ipv6 | 7 |
0 | flow_data | extended_switch | 4 |
0 | flow_data | extended_router | 3 |
0 | flow_data | extended_gateway | 9 |
0 | flow_data | extended_user | 4 |
0 | flow_data | extended_url | 3 |
0 | flow_data | extended_mpls | 3 |
0 | flow_data | extended_nat | 2 |
0 | flow_data | extended_mpls_tunnel | 3 |
0 | flow_data | extended_mpls_vc | 3 |
0 | flow_data | extended_mpls_FTN | 2 |
0 | flow_data | extended_mpls_LDP_FEC | 1 |
0 | flow_data | extended_vlantunnel | 1 |
0 | flow_data | extended_80211_payload | 2 |
0 | flow_data | extended_80211_rx | 8 |
0 | flow_data | extended_80211_tx | 9 |
0 | flow_data | extended_openflow_v1 | 3 |
0 | flow_data | extended_fc | 6 |
0 | flow_data | extended_queue_length | 2 |
0 | flow_data | extended_nat_port | 2 |
0 | flow_data | extended_L2_tunnel_egress | 3 |
0 | flow_data | extended_L2_tunnel_ingress | 3 |
0 | flow_data | extended_ipv4_tunnel_egress | 7 |
0 | flow_data | extended_ipv4_tunnel_ingress | 7 |
0 | flow_data | extended_ipv6_tunnel_egress | 7 |
0 | flow_data | extended_ipv6_tunnel_ingress | 7 |
0 | flow_data | extended_decapsulate_egress | 1 |
0 | flow_data | extended_decapsulate_ingress | 1 |
0 | flow_data | extended_vni_egress | 1 |
0 | flow_data | extended_vni_ingress | 1 |
0 | flow_data | extended_ib_lrh | 10 |
0 | flow_data | extended_ib_grh | 4 |
0 | flow_data | extended_ib_brh | 2 |
0 | flow_data | extended_vlanin | 2 |
0 | flow_data | extended_vlanout | 2 |
0 | flow_data | extended_egress_queue | 1 |
0 | flow_data | extended_acl | 3 |
0 | flow_data | extended_function | 1 |
0 | flow_data | extended_transit | 1 |
0 | flow_data | extended_queue | 1 |
0 | flow_data | transaction | 6 |
0 | flow_data | extended_nfs_storage_transaction | 3 |
0 | flow_data | extensed_scsi_storage_transaction | 3 |
0 | flow_data | extended_http_transaction | 6 |
0 | flow_data | extended_socket_ipv4 | 5 |
0 | flow_data | extended_socket_ipv6 | 5 |
0 | flow_data | extended_proxy_socket_ipv4 | 1 |
0 | flow_data | extended_proxy_socket_ipv6 | 1 |
0 | flow_data | memcached_operation | 7 |
0 | flow_data | http_request (deprecated) | 9 |
0 | flow_data | app_operation | 8 |
0 | flow_data | app_parent_context | 3 |
0 | flow_data | app_initiator | 1 |
0 | flow_data | app_target | 1 |
0 | flow_data | http_request | 13 |
0 | flow_data | extended_proxy_request | 1 |
0 | flow_data | extended_nav_timing | 23 |
0 | flow_data | extended_tcp_info | 12 |
0 | flow_data | extended_entities | 2 |
4413 | flow_data | bst_egress_queue | 1 |
Flow Samples
flow_sample
Name | Community | Basic | Standard | Premium |
---|---|---|---|---|
sample_sequence | ✓ | ✓ | ✓ | ✓ |
source_id_type | ✓ | ✓ | ✓ | ✓ |
source_id | ✓ | ✓ | ✓ | ✓ |
sampling_rate | ✓ | ✓ | ✓ | ✓ |
sample_pool | ✓ | ✓ | ✓ | ✓ |
drops | ✓ | ✓ | ✓ | ✓ |
interface_format_input | ✓ | ✓ | ✓ | ✓ |
interface_input | ✓ | ✓ | ✓ | ✓ |
interface_format_output | ✓ | ✓ | ✓ | ✓ |
interface_output | ✓ | ✓ | ✓ | ✓ |
sampled_header (enterprise = 0, format = 1)
Name | Community | Basic | Standard | Premium |
---|---|---|---|---|
header_protocol | ✓ | ✓ | ✓ | ✓ |
frame_length | ✓ | ✓ | ✓ | ✓ |
stripped | ✓ | ✓ | ✓ | ✓ |
length | ✓ | ✓ | ✓ | ✓ |
header | ✓ | ✓ | ✓ | ✓ |
Ethernet
Name | Community | Basic | Standard | Premium |
---|---|---|---|---|
destination_mac_addr | ✓ | ✓ | ✓ | ✓ |
source_mac_addr | ✓ | ✓ | ✓ | ✓ |
VLAN C-Tag "inner tag"
Name | Community | Basic | Standard | Premium |
---|---|---|---|---|
c_vlan_pcp | ✓ | ✓ | ✓ | ✓ |
c_vlan_dei | ✓ | ✓ | ✓ | ✓ |
c_vlan_id | ✓ | ✓ | ✓ | ✓ |
VLAN S-Tag "outer tag"
Name | Community | Basic | Standard | Premium |
---|---|---|---|---|
s_vlan_pcp | ✓ | ✓ | ✓ | ✓ |
s_vlan_dei | ✓ | ✓ | ✓ | ✓ |
s_vlan_id | ✓ | ✓ | ✓ | ✓ |
Internet Protocol version 4 (IPv4) (ether_type: 0x0800)
Name | Community | Basic | Standard | Premium |
---|---|---|---|---|
version | ✓ | ✓ | ✓ | ✓ |
dscp | ✓ | ✓ | ✓ | ✓ |
ecn | ✓ | ✓ | ✓ | ✓ |
total_length | ✓ | ✓ | ✓ | ✓ |
flags | ✓ | ✓ | ✓ | ✓ |
ttl | ✓ | ✓ | ✓ | ✓ |
protocol | ✓ | ✓ | ✓ | ✓ |
source_ipaddr | ✓ | ✓ | ✓ | ✓ |
destination_ipaddr | ✓ | ✓ | ✓ | ✓ |
options | ✓ | ✓ | ✓ | ✓ |
Internet Protocol version 6 (IPv6) (ether_type: 0x86dd)
Name | Community | Basic | Standard | Premium |
---|---|---|---|---|
version | ✓ | ✓ | ✓ | ✓ |
dscp | ✓ | ✓ | ✓ | ✓ |
ecn | ✓ | ✓ | ✓ | ✓ |
flow_label | ✓ | ✓ | ✓ | ✓ |
payload_length | ✓ | ✓ | ✓ | ✓ |
next_header | ✓ | ✓ | ✓ | ✓ |
hop_limit | ✓ | ✓ | ✓ | ✓ |
source_ipaddr | ✓ | ✓ | ✓ | ✓ |
destination_ipaddr | ✓ | ✓ | ✓ | ✓ |
ext_route_type | ✓ | ✓ | ✓ | ✓ |
ext_route_hops | ✓ | ✓ | ✓ | ✓ |
Point-to-Point Protocol over Ethernet (PPPoE) Discovery (ether_type: 0x8863)
Name | Community | Basic | Standard | Premium |
---|---|---|---|---|
code | ✓ | ✓ | ✓ | ✓ |
session_id | ✓ | ✓ | ✓ | ✓ |
ddl_proto | ✓ | ✓ | ✓ | ✓ |
type | ✓ | ✓ | ✓ | ✓ |
version | ✓ | ✓ | ✓ | ✓ |
Point-to-Point Protocol over Ethernet (PPPoE) Session (ether_type: 0x8864)
Name | Community | Basic | Standard | Premium |
---|---|---|---|---|
code | ✓ | ✓ | ✓ | ✓ |
session_id | ✓ | ✓ | ✓ | ✓ |
ddl_proto | ✓ | ✓ | ✓ | ✓ |
type | ✓ | ✓ | ✓ | ✓ |
version | ✓ | ✓ | ✓ | ✓ |
Transmission Control Protocol (TCP)
Name | Community | Basic | Standard | Premium |
---|---|---|---|---|
header_size | ✓ | ✓ | ✓ | ✓ |
source port | ✓ | ✓ | ✓ | ✓ |
destination port | ✓ | ✓ | ✓ | ✓ |
flags | ✓ | ✓ | ✓ | ✓ |
seq | ✓ | ✓ | ✓ | ✓ |
ack | ✓ | ✓ | ✓ | ✓ |
window | ✓ | ✓ | ✓ | ✓ |
urgent_pointer | ✓ | ✓ | ✓ | ✓ |
options | ✓ | ✓ | ✓ | ✓ |
User Datagram Protocol (UDP)
Name | Community | Basic | Standard | Premium |
---|---|---|---|---|
source_port | ✓ | ✓ | ✓ | ✓ |
destination_port | ✓ | ✓ | ✓ | ✓ |
pdu_length | ✓ | ✓ | ✓ | ✓ |
Authentication Header (AH)
Name | Community | Basic | Standard | Premium |
---|---|---|---|---|
icv | ✓ | ✓ | ✓ | ✓ |
spi | ✓ | ✓ | ✓ | ✓ |
Address Resolution Protocol (ARP)
Name | Community | Basic | Standard | Premium |
---|---|---|---|---|
dst_hw_addr | ✓ | ✓ | ✓ | ✓ |
dst_proto_addr | ✓ | ✓ | ✓ | ✓ |
hw_type | ✓ | ✓ | ✓ | ✓ |
op_code | ✓ | ✓ | ✓ | ✓ |
proto_type | ✓ | ✓ | ✓ | ✓ |
src_hw_addr | ✓ | ✓ | ✓ | ✓ |
src_proto_addr | ✓ | ✓ | ✓ | ✓ |
Border Gateway Protocol (BGP)
Name | Community | Basic | Standard | Premium |
---|---|---|---|---|
error_code | ✓ | ✓ | ✓ | ✓ |
error_subcode | ✓ | ✓ | ✓ | ✓ |
hold_time | ✓ | ✓ | ✓ | ✓ |
msg_type | ✓ | ✓ | ✓ | ✓ |
route_afi | ✓ | ✓ | ✓ | ✓ |
route_safi | ✓ | ✓ | ✓ | ✓ |
router_as | ✓ | ✓ | ✓ | ✓ |
router_ip | ✓ | ✓ | ✓ | ✓ |
version | ✓ | ✓ | ✓ | ✓ |
Encapsulating Security Payload (ESP)
Name | Community | Basic | Standard | Premium |
---|---|---|---|---|
spi | ✓ | ✓ | ✓ | ✓ |
Generic Routing Encapsulation (GRE)
Name | Community | Basic | Standard | Premium |
---|---|---|---|---|
flow_id | ✓ | ✓ | ✓ | ✓ |
key | ✓ | ✓ | ✓ | ✓ |
pptp_call_id | ✓ | ✓ | ✓ | ✓ |
pptp_payload_size | ✓ | ✓ | ✓ | ✓ |
version | ✓ | ✓ | ✓ | ✓ |
vsid | ✓ | ✓ | ✓ | ✓ |
Internet Control Message Protocol (ICMP)
Name | Community | Basic | Standard | Premium |
---|---|---|---|---|
v4_code | ✓ | ✓ | ✓ | ✓ |
v4_type | ✓ | ✓ | ✓ | ✓ |
v6_code | ✓ | ✓ | ✓ | ✓ |
v6_type | ✓ | ✓ | ✓ | ✓ |
conv_error_pointer | ✓ | ✓ | ✓ | ✓ |
dns_names | ✓ | ✓ | ✓ | ✓ |
dns_ttl | ✓ | ✓ | ✓ | ✓ |
echo_ext_req_flags | ✓ | ✓ | ✓ | ✓ |
echo_ext_resp_flags | ✓ | ✓ | ✓ | ✓ |
echo_ext_state | ✓ | ✓ | ✓ | ✓ |
id | ✓ | ✓ | ✓ | ✓ |
mobile_subtype | ✓ | ✓ | ✓ | ✓ |
param_error_pointer | ✓ | ✓ | ✓ | ✓ |
photuris_pointer | ✓ | ✓ | ✓ | ✓ |
redirect_next_hop | ✓ | ✓ | ✓ | ✓ |
router_advert_addrs | ✓ | ✓ | ✓ | ✓ |
router_advert_size | ✓ | ✓ | ✓ | ✓ |
router_advert_lifetime | ✓ | ✓ | ✓ | ✓ |
seq_num | ✓ | ✓ | ✓ | ✓ |
subnet_mask | ✓ | ✓ | ✓ | ✓ |
timestamp_origin | ✓ | ✓ | ✓ | ✓ |
timestamp_rx | ✓ | ✓ | ✓ | ✓ |
timestamp_tx | ✓ | ✓ | ✓ | ✓ |
traceroute_id | ✓ | ✓ | ✓ | ✓ |
traceroute_hops_out | ✓ | ✓ | ✓ | ✓ |
traceroute_hops_in | ✓ | ✓ | ✓ | ✓ |
traceroute_bandwidth_out | ✓ | ✓ | ✓ | ✓ |
traceroute_mtu_out | ✓ | ✓ | ✓ | ✓ |
Inband Flow Analyzer (IFA)
Name | Community | Basic | Standard | Premium |
---|---|---|---|---|
flags | ✓ | ✓ | ✓ | ✓ |
gns | ✓ | ✓ | ✓ | ✓ |
metadata_action | ✓ | ✓ | ✓ | ✓ |
metadata_frag_id | ✓ | ✓ | ✓ | ✓ |
metadata_frag_last | ✓ | ✓ | ✓ | ✓ |
metadata_frag_packet_id | ✓ | ✓ | ✓ | ✓ |
metadata_size_max | ✓ | ✓ | ✓ | ✓ |
metadata_req | ✓ | ✓ | ✓ | ✓ |
metadata_size | ✓ | ✓ | ✓ | ✓ |
metadata_ttl | ✓ | ✓ | ✓ | ✓ |
Internet Group Management Protocol (IGMP)
Name | Community | Basic | Standard | Premium |
---|---|---|---|---|
group | ✓ | ✓ | ✓ | ✓ |
max_resp_time | ✓ | ✓ | ✓ | ✓ |
type | ✓ | ✓ | ✓ | ✓ |
Logical Link Control (LLC)
Name | Community | Basic | Standard | Premium |
---|---|---|---|---|
dsap | ✓ | ✓ | ✓ | ✓ |
dsap_u | ✓ | ✓ | ✓ | ✓ |
dsap_ig | ✓ | ✓ | ✓ | ✓ |
lpdu_frame_type | ✓ | ✓ | ✓ | ✓ |
lpdu_info_seq_curr | ✓ | ✓ | ✓ | ✓ |
lpdu_info_seq_next | ✓ | ✓ | ✓ | ✓ |
lpdu_pf | ✓ | ✓ | ✓ | ✓ |
lpdu_super_frame_type | ✓ | ✓ | ✓ | ✓ |
lpdu_super_seq_next | ✓ | ✓ | ✓ | ✓ |
lpdu_unnum_frame_type | ✓ | ✓ | ✓ | ✓ |
ssap | ✓ | ✓ | ✓ | ✓ |
ssap_u | ✓ | ✓ | ✓ | ✓ |
ssap_cr | ✓ | ✓ | ✓ | ✓ |
Multi-Protocol Label Switching (MPLS)
Name | Community | Basic | Standard | Premium |
---|---|---|---|---|
mpls_label | ✓ | ✓ | ✓ | ✓ |
mpls_tc | ✓ | ✓ | ✓ | ✓ |
mpls_ttl | ✓ | ✓ | ✓ | ✓ |
Network Service Header (NSH)
Name | Community | Basic | Standard | Premium |
---|---|---|---|---|
flag_oam_bit | ✓ | ✓ | ✓ | ✓ |
metadata_type | ✓ | ✓ | ✓ | ✓ |
sfp_si | ✓ | ✓ | ✓ | ✓ |
sfp_spi | ✓ | ✓ | ✓ | ✓ |
ttl | ✓ | ✓ | ✓ | ✓ |
version | ✓ | ✓ | ✓ | ✓ |
opt_metadata_class | ✓ | ✓ | ✓ | ✓ |
opt_metadata_type | ✓ | ✓ | ✓ | ✓ |
opt_payload | ✓ | ✓ | ✓ | ✓ |
Open Shortest Path First (OSPF)
Name | Community | Basic | Standard | Premium |
---|---|---|---|---|
version | ✓ | ✓ | ✓ | ✓ |
router_ip | ✓ | ✓ | ✓ | ✓ |
area | ✓ | ✓ | ✓ | ✓ |
auth_code | ✓ | ✓ | ✓ | ✓ |
msg_type | ✓ | ✓ | ✓ | ✓ |
inst_id | ✓ | ✓ | ✓ | ✓ |
Point-to-Point Protocol (PPP)
Name | Community | Basic | Standard | Premium |
---|---|---|---|---|
addr | ✓ | ✓ | ✓ | ✓ |
cntrl_value | ✓ | ✓ | ✓ | ✓ |
dll_proto | ✓ | ✓ | ✓ | ✓ |
Pseudowire
Name | Community | Basic | Standard | Premium |
---|---|---|---|---|
pwe3_seq | ✓ | ✓ | ✓ | ✓ |
Subnetwork Access Protocol (SNAP)
Name | Community | Basic | Standard | Premium |
---|---|---|---|---|
oui | ✓ | ✓ | ✓ | ✓ |
Virtual Extensible LAN (VXLAN)
Name | Community | Basic | Standard | Premium |
---|---|---|---|---|
flags | ✓ | ✓ | ✓ | ✓ |
vni | ✓ | ✓ | ✓ | ✓ |
sampled_ethernet (enterprise = 0, format = 2)
Name | Community | Basic | Standard | Premium |
---|---|---|---|---|
source_mac_addr | ✓ | ✓ | ✓ | ✓ |
destination_mac_addr | ✓ | ✓ | ✓ | ✓ |
eth_type | ✓ | ✓ | ✓ | ✓ |
sampled_ipv4 (enterprise = 0, format = 3)
Name | Community | Basic | Standard | Premium |
---|---|---|---|---|
ip_protocol | ✓ | ✓ | ✓ | ✓ |
src_ip | ✓ | ✓ | ✓ | ✓ |
dst_ip | ✓ | ✓ | ✓ | ✓ |
src_port | ✓ | ✓ | ✓ | ✓ |
dst_port | ✓ | ✓ | ✓ | ✓ |
tcp_flags | ✓ | ✓ | ✓ | ✓ |
tos | ✓ | ✓ | ✓ | ✓ |
sampled_ipv6 (enterprise = 0, format = 4)
Name | Community | Basic | Standard | Premium |
---|---|---|---|---|
ip_protocol | ✓ | ✓ | ✓ | ✓ |
src_ip | ✓ | ✓ | ✓ | ✓ |
dst_ip | ✓ | ✓ | ✓ | ✓ |
src_port | ✓ | ✓ | ✓ | ✓ |
dst_port | ✓ | ✓ | ✓ | ✓ |
tcp_flags | ✓ | ✓ | ✓ | ✓ |
ip_priority | ✓ | ✓ | ✓ | ✓ |
extended_switch (enterprise = 0, format = 1001)
Name | Community | Basic | Standard | Premium |
---|---|---|---|---|
src_vlan | ✓ |