Skip to main content
Version: 6.4

IPFIX IEs

The ElastiFlow Unified Flow Collector supports 4284 unique IPFIX information elements (IE).

PENVendorIEs
0IANA462
9Cisco581
568NetQuest109
637Nokia (was Alcatel-Lucent)139
1916Extreme Networks13
2428UNINETT30
2636Juniper Networks5
3054Ixia Communications153
5951Citrix Systems (was Netscaler)469
6321Calix Networks463
6871CERT Coordination Center269
6876VMware30
8057CESNET81
8712LANcope (Cisco)43
8741SonicWALL160
9789Sophos (was Astaro AG)3
10704Barracuda Networks (was phion)12
12276F5 Networks91
12325Fraunhofer FOKUS111
12559INRIA10
13745Plixer33
15397Sandvine (was Procera Networks / Netintact)67
16982Masaryk University63
21373netfilter/iptables project2
25461Palo Alto Networks2
26866Gigamon Systems72
29305IPFIX Reverse Information Elements409
32182Cubro1
32622CACE Technologies12
33610FastIP / Boundary23
35566trammell.ch30
35632ntop370
39499INVEA-TECH / FlowMon Networks196
40842A10 Networks15
41916vIPtela (Cisco)2
42359Versa Networks4
43874pmacct4
44237Allegro Packets2
44619Ziften Technologies18
44913RedSocks9
45346Velocloud Networks (VMware)24
45480Cognitix27
45956Juniper Networks (was 128 Technology)13
47269Pluribus Networks1
47729Niagara Networks86
51886Pensando Systems13
56506Project Antrea (VMware)48

Standards-based IEs (PEN: 0)

IDNameCommunityBasicStandardPremium
1octetDeltaCount
2packetDeltaCount
3deltaFlowCount
4protocolIdentifier
5ipClassOfService
6tcpControlBits
7sourceTransportPort
8sourceIPv4Address
9sourceIPv4PrefixLength
10ingressInterface
11destinationTransportPort
12destinationIPv4Address
13destinationIPv4PrefixLength
14egressInterface
15ipNextHopIPv4Address
16bgpSourceAsNumber
17bgpDestinationAsNumber
18bgpNextHopIPv4Address
19postMCastPacketDeltaCount
20postMCastOctetDeltaCount
21flowEndSysUpTime
22flowStartSysUpTime
23postOctetDeltaCount
24postPacketDeltaCount
25minimumIpTotalLength
26maximumIpTotalLength
27sourceIPv6Address
28destinationIPv6Address
29sourceIPv6PrefixLength
30destinationIPv6PrefixLength
31flowLabelIPv6
32icmpTypeCodeIPv4
33igmpType
34samplingInterval
35samplingAlgorithm
36flowActiveTimeout
37flowIdleTimeout
38engineType
39engineId
40exportedOctetTotalCount
41exportedMessageTotalCount
42exportedFlowRecordTotalCount
44sourceIPv4Prefix
45destinationIPv4Prefix
46mplsTopLabelType
47mplsTopLabelIPv4Address
48samplerId
49samplerMode
50samplerRandomInterval
51classId
52minimumTTL
53maximumTTL
54fragmentIdentification
55postIpClassOfService
56sourceMacAddress
57postDestinationMacAddress
58vlanId
59postVlanId
60ipVersion
61flowDirection
62ipNextHopIPv6Address
63bgpNextHopIPv6Address
64ipv6ExtensionHeaders
65transportPacketLoss Cisco Legacy
66transportUnreachability Cisco Legacy
67transportLatency Cisco Legacy
68dataPoints Cisco Legacy
69variance Cisco Legacy
70mplsTopLabelStackSection
71mplsLabelStackSection2
72mplsLabelStackSection3
73mplsLabelStackSection4
74mplsLabelStackSection5
75mplsLabelStackSection6
76mplsLabelStackSection7
77mplsLabelStackSection8
78mplsLabelStackSection9
79mplsLabelStackSection10
80destinationMacAddress
81postSourceMacAddress
82interfaceName
83interfaceDescription
84samplerName
85octetTotalCount
86packetTotalCount
87flagsAndSamplerId
88fragmentOffset
89forwardingStatus
90mplsVpnRouteDistinguisher
91mplsTopLabelPrefixLength
92srcTrafficIndex
93dstTrafficIndex
94applicationDescription
95applicationId
96applicationName
97subApplicationTag Cisco Legacy
98postIpDiffServCodePoint
99multicastReplicationFactor
100className
101classificationEngineId
102layer2packetSectionOffset
103layer2packetSectionSize
104layer2packetSectionData
105applicationVersion Cisco Legacy
106applicationVersionName Cisco Legacy
107applicationVendor Cisco Legacy
109subApplicationName Cisco Legacy
110subApplicationDescription Cisco Legacy
111templateParameterRangeEnd Cisco Legacy
128bgpNextAdjacentAsNumber
129bgpPrevAdjacentAsNumber
130exporterIPv4Address
131exporterIPv6Address
132droppedOctetDeltaCount
133droppedPacketDeltaCount
134droppedOctetTotalCount
135droppedPacketTotalCount
136flowEndReason
137commonPropertiesId
138observationPointId
139icmpTypeCodeIPv6
140mplsTopLabelIPv6Address
141lineCardId
142portId
143meteringProcessId
144exportingProcessId
145templateId
146wlanChannelId
147wlanSSID
148flowId
149observationDomainId
150flowStartSeconds
151flowEndSeconds
152flowStartMilliseconds
153flowEndMilliseconds
154flowStartMicroseconds
155flowEndMicroseconds
156flowStartNanoseconds
157flowEndNanoseconds
158flowStartDeltaMicroseconds
159flowEndDeltaMicroseconds
160systemInitTimeMilliseconds
161flowDurationMilliseconds
162flowDurationMicroseconds
163observedFlowTotalCount
164ignoredPacketTotalCount
165ignoredOctetTotalCount
166notSentFlowTotalCount
167notSentPacketTotalCount
168notSentOctetTotalCount
169destinationIPv6Prefix
170sourceIPv6Prefix
171postOctetTotalCount
172postPacketTotalCount
173flowKeyIndicator
174postMCastPacketTotalCount
175postMCastOctetTotalCount
176icmpTypeIPv4
177icmpCodeIPv4
178icmpTypeIPv6
179icmpCodeIPv6
180udpSourcePort
181udpDestinationPort
182tcpSourcePort
183tcpDestinationPort
184tcpSequenceNumber
185tcpAcknowledgementNumber
186tcpWindowSize
187tcpUrgentPointer
188tcpHeaderLength
189ipHeaderLength
190totalLengthIPv4
191payloadLengthIPv6
192ipTTL
193nextHeaderIPv6
194mplsPayloadLength
195ipDiffServCodePoint
196ipPrecedence
197fragmentFlags
198octetDeltaSumOfSquares
199octetTotalSumOfSquares
200mplsTopLabelTTL
201mplsLabelStackLength
202mplsLabelStackDepth
203mplsTopLabelExp
204ipPayloadLength
205udpMessageLength
206isMulticast
207ipv4IHL
208ipv4Options
209tcpOptions
210paddingOctets
211collectorIPv4Address
212collectorIPv6Address
213exportInterface
214exportProtocolVersion
215exportTransportProtocol
216collectorTransportPort
217exporterTransportPort
218tcpSynTotalCount
219tcpFinTotalCount
220tcpRstTotalCount
221tcpPshTotalCount
222tcpAckTotalCount
223tcpUrgTotalCount
224ipTotalLength
225postNATSourceIPv4Address
226postNATDestinationIPv4Address
227postNAPTSourceTransportPort
228postNAPTDestinationTransportPort
229natOriginatingAddressRealm
230natEvent
231initiatorOctets
232responderOctets
233firewallEvent
234ingressVRFID
235egressVRFID
236VRFname
237postMplsTopLabelExp
238tcpWindowScale
239biflowDirection
240ethernetHeaderLength
241ethernetPayloadLength
242ethernetTotalLength
243dot1qVlanId
244dot1qPriority
245dot1qCustomerVlanId
246dot1qCustomerPriority
247metroEvcId
248metroEvcType
249pseudoWireId
250pseudoWireType
251pseudoWireControlWord
252ingressPhysicalInterface
253egressPhysicalInterface
254postDot1qVlanId
255postDot1qCustomerVlanId
256ethernetType
257postIpPrecedence
258collectionTimeMilliseconds
259exportSctpStreamId
260maxExportSeconds
261maxFlowEndSeconds
262messageMD5Checksum
263messageScope
264minExportSeconds
265minFlowStartSeconds
266opaqueOctets
267sessionScope
268maxFlowEndMicroseconds
269maxFlowEndMilliseconds
270maxFlowEndNanoseconds
271minFlowStartMicroseconds
272minFlowStartMilliseconds
273minFlowStartNanoseconds
274collectorCertificate
275exporterCertificate
276dataRecordsReliability
277observationPointType
278newConnectionDeltaCount
279connectionSumDurationSeconds
280connectionTransactionId
281postNATSourceIPv6Address
282postNATDestinationIPv6Address
283natPoolId
284natPoolName
285anonymizationFlags
286anonymizationTechnique
287informationElementIndex
288p2pTechnology
289tunnelTechnology
290encryptedTechnology
294bgpValidityState
295IPSecSPI
296greKey
297natType
298initiatorPackets
299responderPackets
300observationDomainName
301selectionSequenceId
302selectorId
303informationElementId
304selectorAlgorithm
305samplingPacketInterval
306samplingPacketSpace
307samplingTimeInterval
308samplingTimeSpace
309samplingSize
310samplingPopulation
311samplingProbability
312dataLinkFrameSize
313ipHeaderPacketSection
314ipPayloadPacketSection
315dataLinkFrameSection
316mplsLabelStackSection
317mplsPayloadPacketSection
318selectorIdTotalPktsObserved
319selectorIdTotalPktsSelected
320absoluteError
321relativeError
322observationTimeSeconds
323observationTimeMilliseconds
324observationTimeMicroseconds
325observationTimeNanoseconds
326digestHashValue
327hashIPPayloadOffset
328hashIPPayloadSize
329hashOutputRangeMin
330hashOutputRangeMax
331hashSelectedRangeMin
332hashSelectedRangeMax
333hashDigestOutput
334hashInitialiserValue
335selectorName
336upperCILimit
337lowerCILimit
338confidenceLevel
339informationElementDataType
340informationElementDescription
341informationElementName
342informationElementRangeBegin
343informationElementRangeEnd
344informationElementSemantics
345informationElementUnits
346privateEnterpriseNumber
347virtualStationInterfaceId
348virtualStationInterfaceName
349virtualStationUUID
350virtualStationName
351layer2SegmentId
352layer2OctetDeltaCount
353layer2OctetTotalCount
354ingressUnicastPacketTotalCount
355ingressMulticastPacketTotalCount
356ingressBroadcastPacketTotalCount
357egressUnicastPacketTotalCount
358egressBroadcastPacketTotalCount
359monitoringIntervalStartMilliSeconds
360monitoringIntervalEndMilliSeconds
361portRangeStart
362portRangeEnd
363portRangeStepSize
364portRangeNumPorts
365staMacAddress
366staIPv4Address
367wtpMacAddress
368ingressInterfaceType
369egressInterfaceType
370rtpSequenceNumber
371userName
372applicationCategoryName
373applicationSubCategoryName
374applicationGroupName
375originalFlowsPresent
376originalFlowsInitiated
377originalFlowsCompleted
378distinctCountOfSourceIPAddress
379distinctCountOfDestinationIPAddress
380distinctCountOfSourceIPv4Address
381distinctCountOfDestinationIPv4Address
382distinctCountOfSourceIPv6Address
383distinctCountOfDestinationIPv6Address
384valueDistributionMethod
385rfc3550JitterMilliseconds
386rfc3550JitterMicroseconds
387rfc3550JitterNanoseconds
388dot1qDEI
389dot1qCustomerDEI
390flowSelectorAlgorithm
391flowSelectedOctetDeltaCount
392flowSelectedPacketDeltaCount
393flowSelectedFlowDeltaCount
394selectorIDTotalFlowsObserved
395selectorIDTotalFlowsSelected
396samplingFlowInterval
397samplingFlowSpacing
398flowSamplingTimeInterval
399flowSamplingTimeSpacing
400hashFlowDomain
401transportOctetDeltaCount
402transportPacketDeltaCount
403originalExporterIPv4Address
404originalExporterIPv6Address
405originalObservationDomainId
406intermediateProcessId
407ignoredDataRecordTotalCount
408dataLinkFrameType
409sectionOffset
410sectionExportedOctets
411dot1qServiceInstanceTag
412dot1qServiceInstanceId
413dot1qServiceInstancePriority
414dot1qCustomerSourceMacAddress
415dot1qCustomerDestinationMacAddress
416layer2OctetDeltaCount
417postLayer2OctetDeltaCount
418postMCastLayer2OctetDeltaCount
419layer2OctetTotalCount
420postLayer2OctetTotalCount
421postMCastLayer2OctetTotalCount
422minimumLayer2TotalLength
423maximumLayer2TotalLength
424droppedLayer2OctetDeltaCount
425droppedLayer2OctetTotalCount
426ignoredLayer2OctetTotalCount
427notSentLayer2OctetTotalCount
428layer2OctetDeltaSumOfSquares
429layer2OctetTotalSumOfSquares
430layer2FrameDeltaCount
431layer2FrameTotalCount
432pseudoWireDestinationIPv4Address
433ignoredLayer2FrameTotalCount
434mibObjectValueInteger
435mibObjectValueOctetString
436mibObjectValueOID
437mibObjectValueBits
438mibObjectValueIPAddress
439mibObjectValueCounter
440mibObjectValueGauge
441mibObjectValueTimeTicks
442mibObjectValueUnsigned
445mibObjectIdentifier
446mibSubIdentifier
447mibIndexIndicator
448mibCaptureTimeSemantics
449mibContextEngineID
450mibContextName
451mibObjectName
452mibObjectDescription
453mibObjectSyntax
454mibModuleName
455mobileIMSI
456mobileMSISDN
457httpStatusCode
458sourceTransportPortsLimit
459httpRequestMethod
460httpRequestHost
461httpRequestTarget
462httpMessageVersion
463natInstanceID
464internalAddressRealm
465externalAddressRealm
466natQuotaExceededEvent
467natThresholdEvent
468httpUserAgent
469httpContentType
470httpReasonPhrase
471maxSessionEntries
472maxBIBEntries
473maxEntriesPerUser
474maxSubscribers
475maxFragmentsPendingReassembly
476addressPoolHighThreshold
477addressPoolLowThreshold
478addressPortMappingHighThreshold
479addressPortMappingLowThreshold
480addressPortMappingPerUserHighThreshold
481globalAddressMappingHighThreshold
482vpnIdentifier
483bgpCommunity
486bgpExtendedCommunity
489bgpLargeCommunity

Cisco (PEN: 9)

NameCommunityBasicStandardPremium
scTag
scTrafficProcessorId
scSourceIpSample
scDestinationIpSample
scFlowContextId
scSubscriberId
scPackageId
scServiceId
scProtocolId
scSkipppedSessions
scInitiatingSide
scReportTime
scTransactionDurationMillisec
scTimeFrame
scSessionUpstreamVolume
scSessionDownstreamVolume
scProtocolSignature
scZoneId
scFlavorId
scFlowCloseMode
scAccessString
scInfoString
scClientPort
scServerPort
scSubscriberCounterId
scServiceUsageCounterId
scBreachState
scReason
scConfiguredDuration
scDuration
scEndTime
scUpstreamVolume
scDownstreamVolume
scSessions
scSeconds
scPackageCounterId
scGeneratorId
scServiceGlobalCounterId
scConcurrentSessions
scActiveSubscribers
scTotalActiveSubscribers
scLinkId
scAttackId
scAttackIp
scAttackOtherIp
scAttackPortNumber
scAttackType
scAttackSide
scAttackIpProtocol
scAttacks
scAttackMaliciousSessions
INGRESS_ACL_ID
EGRESS_ACL_ID
FW_EXT_EVENT
FW_EVENT_LEVEL
FW_EVENT_LEVEL_ID
FW_CONFIGURED_VALUE
FW_ERM_EXT_EVENT
FW_ERM_EXT_EVENT_DESC
audio rtp packets lost
audio rtp packets expected
audio rtp fwd out-of-sequence sum
audio rtp seconds ok
audio rtp seconds concealed
audio rtp seconds concealed severe
audio rtp jitter ticks
audio g107 impairment
audio g107 lossRate
audio g107 codec baseline
audio g107 codec baseline bpl
audio g107 impairment one-way-delay
audio concealment ratio now
audio concealment ratio minimum
audio concealment ratio maximum
audio concealment time
audio speech time
audio packets ok
audio packets cs
audio packets scs
audio packets rtp
audio packets silence
audio duration receive
audio duration receive voice
audio duration early packet
audio duration clock adjust
audio duration playout increase
audio duration playout decrease
audio duration late discard
audio frame size
audio frames-per-packet
audio frame arriving times difference
audio frame arriving times difference vari
audio noise level current
audio noise level average
audio noise level minimum
audio noise level maximum
audio noise level configured
audio snr current
audio snr average
audio snr minimum
audio snr maximum
audio snr configured
vxlan sgt
vxlan flags
vxlan vtep input
vxlan vtep output
SGT_SOURCE_TAG
SGT_DESTINATION_TAG
SGT_SOURCE_NAME
SGT_DESTINATION_NAME
flow cts switch derived-sgt
FW_EXT_EVENT
FW_BLACKOUT_SECS
FW_HALFOPEN_HIGH
FW_HALFOPEN_RATE
FW_ZONEPAIR_ID
FW_MAX_SESSIONS
FW_ZONEPAIR_NAME
FW_EXT_EVENT_DESC
FW_SUMMARY_PKT_CNT
FW_HALFOPEN_CNT
waas dre input
waas dre output
waas lz input
waas lz output
waas original bytes
waas optimised bytes
waas application
waas class
waas connection mode
waas bytes input
waas bytes output
PACKETS_DROPPED
counter packets dropped permanent
PACKET_RATE
BYTE_RATE
application media bytes counter
application media bytes counter permanent
application media bytes rate
application media packets counter
application media packets counter permanen
application media packets rate
application media packets rate variation
application media event
monitor event
timestamp interval
transport packets expected counter
transport packets expected counter permane
transport round-trip-time
transport event packet-loss counter
transport event packet-loss counter perman
transport packets lost counter
transport packets lost counter permanent
transport packets lost rate
transport rtp ssrc
transport rtp jitter mean
transport rtp jitter minimum
transport rtp jitter maximum
misc unsupported
counter bytes rate per-flow
counter bytes rate per-flow min
counter bytes rate per-flow max
counter packets rate per-flow
counter packets rate per-flow min
counter packets rate per-flow max
application media bytes rate per-flow
application media bytes rate per-flow min
application media bytes rate per-flow max
application media packets rate variation m
application media packets rate variation m
transport rtp flow count
transport rtp payload-type
transport packets lost counter min
transport packets lost counter max
transport event packet-loss counter min
transport event packet-loss counter max
transport packets lost rate min
transport packets lost rate max
transport tcp flow count
transport round-trip-time sum
transport round-trip-time samples
transport round-trip-time min
transport round-trip-time max
metadata global-session-id
metadata multi-party-session-id
metadata clock-rate
server response time average
refused sessions
client network delay average
server network delay average
NETWORK_DELAY_AVG network delay average
application delay average
session time minimum
session time maximum
session time average
transaction time average
closed sessions
retransmitted packets
transport bytes out-of-order
client throughput average
unresponsive sessions
transport packets out-of-order
IPv4 source observation node
IPv4 destination observation node
IPv6 source observation node
IPv6 destination observation node
pfr one-way-delay sum
pfr one-way-delay samples
ONE_WAY_DELAY pfr one-way-delay
packet arrival timestamp
transport tcp window-size minimum
transport tcp window-size maximum
transport tcp window-size average
transport tcp maximum-segment-size
transport tcp window-size sum
tcpWindowSizeSum
transport rtp jitter mean sum
application media packets rate variation s
transport tcp window-size average sum
transport rtp jitter inter arrival sum
transport rtp jitter inter arrival samples
transport rtp jitter inter arrival mean
pfr site source id ipv4
pfr site destination id ipv4
transport bytes lost
transport bytes expected
transport bytes lost rate
network delay sum
network delay sample
pfr counter event error traffic-class miti
pfr counter event error traffic-class miti
pfr counter event error traffic-class miti
pfr site source prefix ipv4
pfr site destination prefix ipv4
pfr site source prefix ipv6
pfr site destination prefix ipv6
pfr site source prefix mask ipv4
pfr site destination prefix mask ipv4
pfr site source prefix mask ipv6
pfr site destination prefix mask ipv6
pfr service provider tag identifier
pfr label identifier
application voice number called
application voice number calling
application voice setup time
application voice call duration
application voice rx bad-packet
application voice rx out-of-sequence
application voice codec id
application voice play delay current
application voice play delay minimum
application voice play delay maximum
application voice sip call-id
application voice router global-call-id
application voice delay round-trip
application voice delay end-point
application voice r-factor 1
application voice r-factor 2
application voice mos conversation
application voice mos listening
application voice concealment-ratio averag
application voice jitter configured type
application voice jitter configured minimu
application voice jitter configured maximu
application voice jitter configured initia
application voice rx early-packet count
application voice rx late-packet count
application voice jitter buffer-overrun
application voice packet conceal-count
bandwidth used
bandwidth used percentage
application video resolution width last
application video resolution height last
application video frame rate
application video payload bitrate average
application video payload bitrate fluctuat
application video frame I counter frames
application video frame I counter packets
application video frame I counter bytes
application video frame STR counter frames
application video frame STR counter packet
application video frame STR counter bytes
application video frame LTR counter frames
application video frame LTR counter packet
application video frame LTR counter bytes
application video frame super-P counter fr
application video frame super-P counter pa
application video frame super-P counter by
application video frame NR counter frames
application video frame NR counter packets
application video frame NR counter bytes
application video frame I slice-quantizati
application video frame STR slice-quantiza
application video frame LTR slice-quantiza
application video frame super-P slice-quan
application video frame NR slice-quantizat
application video eMOS compression bitstre
application video eMOS compression network
application video frame I counter packets
application video frame STR counter packet
application video frame LTR counter packet
application video frame super-P counter pa
application video frame NR counter packets
application video frame percentage damaged
application video eMOS packet-loss bitstre
application video eMOS packet-loss network
application video scene-complexity
application video level-of-motion
transport rtp sequence-number
transport rtp sequence-number last
iOAM my node-id
iOAM my node name
start timestamp
end timestamp
IOAM packet counter
IOAM byte count
IOAM cs0 packet counter
IOAM cs0 byte count
IOAM cs1 packet counter
IOAM cs1 byte count
IOAM cs2 packet counter
IOAM cs2 byte count
IOAM cs3 packet counter
IOAM cs3 byte count
IOAM cs4 packet counter
IOAM cs4 byte count
IOAM cs5 packet counter
IOAM cs5 byte count
IOAM cs6 packet counter
IOAM cs6 byte count
IOAM cs7 packet counter
IOAM cs7 byte count
IOAM lost packet counter
IOAM duplicate packet counter
IOAM reordered packet counter
IOAM highest PPC sequence number
iOAM node-id
ipv6 protocol filed
iOAM E2E Header
iOAM Path Map
iOAM number of nodes
iOAM node1 id
iOAM node1 in if id
iOAM node1 eif id
iOAM node2 id
iOAM node2 in if id
iOAM node2 eif id
iOAM node3 id
iOAM node3 in if id
iOAM node3 eif id
iOAM node4 id
iOAM node4 in if id
iOAM node4 eif id
iOAM Application metadata
iOAM sfc-id
iOAM sfc validated count
iOAM sfc invalidated count
pfr br ipv4 address
pfr status
reason id
threshold
pfr priority
long-term round-trip-time
mos below
rsvp bw pool
flow left time
bw percentage
bw fee
transport source-port min
transport source-port max
transport destination-port min
transport destination-port max
capacity
ingress bw
max ingress bw
egress bw
max egress bw
ingress rollup bw
egress rollup bw
kth rollup bw
link group name
bgp community
bgp prepend
entrance downgrade
discard rollup count
services pfr class-tag-id
services pfr mc-id
sip header from uri host ip addr
sip header from uri userinfo user
sip header to uri host ip addr
sip header to uri userinfo user
sip sess duration
sip sess end_reason
sip sess_dialed
sip sess_connected
sip sess_failed
AAA_USERNAME
XLATE_SRC_ADDR_IPV4
XLATE_DST_ADDR_IPV4
XLATE_SRC_PORT
XLATE_DST_PORT
FW_EVENT
artClientNetworkTimeLongLivedMaximum
artClientNetworkTimeLongLivedMinimum
artServerNetworkTimeLongLivedMaximum
artServerNetworkTimeLongLivedMinimum
policy qos classification hierarchy
c3pl class cce-id
c3pl class name
c3pl class type
c3pl policy cce-id
c3pl policy name
c3pl policy type
interface input fex-node-id
interface output fex-node-id
interface power
monitor device-type
connection server counter bytes network
connection client counter bytes network
wireless afd drop packets
wireless afd accept packets
wireless afd drop bytes
wireless afd accept bytes
connection concurrent-connections
application transaction counter new
services waas segment
services waas passthrough-reason
connection delay network long-lived to-ser
connection delay network long-lived to-cli
connection delay network long-lived client
connection delay network client-to-server
connection delay network to-server num-sam
connection delay network to-client num-sam
artClientpackets
artServerpackets
connection client counter bytes retransmit
connection client counter packets retransm
connection server counter bytes retransmit
connection server counter packets retransm
connection transaction counter complete
connection transaction duration sum
connection transaction duration max
connection transaction duration min
art count new connections
art count responses
art count responses histogram bucket1
art count responses histogram bucket2
art count responses histogram bucket3
art count responses histogram bucket4
art count responses histogram bucket5
art count responses histogram bucket6
art count responses histogram bucket7
connection delay response to-server histog
connection delay response to-server sum
connection delay response to-server max
connection delay response to-server min
connection delay application sum
connection delay application max
connection delay application min
connection delay response client-to-server
connection delay response client-to-server
connection delay response client-to-server
connection delay network client-to-server
connection delay network client-to-server
connection delay network client-to-server
connection delay network to-client sum
connection delay network to-client max
connection delay network to-client min
connection delay network to-server sum
connection delay network to-server max
connection delay network to-server min
mos worst 100
mos quality
mos total count
application http uri statistics
policy qos queue index
policy qos queue drops
datalink event
datalink event extended
l4r server ipv4 address
l4r server transport port
l4r server ipv6 address
l4r event
l4r event timestamp
pbhk mapped ipv4 address
pbhk mapped transport port
pbhk event
pbhk event timestamp
ETTA_INITIAL_DATA_PACKET
ETTA_SEQUENCE_OF_PACKET_LENGTHS_AND_TIMES
ETTA_SEQUENCE_OF_APPLICATION_LENGTHS_AND_TIMES
ETAByteDistribution
ETTA_TLS_RECORDS
ETTA_TLS_CIPHER_SUITES
ETTA_TLS_EXTENSIONS
ETTA_TLS_VERSION
ETTA_TLS_KEY_LENGTH
ETTA_TLS_SESSION_ID
ETTA_TLS_RANDOM
ETTA_TLS_EXTENSION_LENGTHS
ETTA_TLS_EXTENSION_TYPES
application family name
application set name
application category name
application sub category name
application group name
AVCSubApplicationValue
connection client ipv4 address
connection server ipv4 address
connection client ipv6 address
connection server ipv6 address
connection client transport port
connection server transport port
connection id
application traffic-class
application business-relevance
nvzFlowUDID
nvzFlowLoggedInUser
nvzFlowOSName
nvzFlowOSVersion
nvzFlowSystemManufacturer
nvzFlowSystemType
nvzFlowProcessAccount
nvzFlowParentProcessAccount
nvzFlowProcessName
nvzFlowProcessHash
nvzFlowParentProcessName
nvzFlowParentProcessHash
nvzFlowDNSSuffix
nvzFlowDestinationHostname
nvzFlowL4ByteCountIn
nvzFlowL4ByteCountOut
nvzFlowOSEdition
nvzFlowModuleNameList
nvzFlowModuleHashList
nvzFlowCoordinatesList
nvzFlowInterfaceInfoUID
nvzFlowInterfaceIndex
nvzFlowInterfaceType
nvzFlowInterfaceName
nvzFlowInterfaceDetailsList
nvzFlowInterfaceMac
nvzFlowUserAccountType
nvzFlowProcessAccountType
nvzFlowParentProcessAccountType
overlay session id input
overlay session id output
routing vrf service
tloc table overlay session id
tloc local system ip address
tloc local color
tloc remote system ip address
tloc remote color
tloc tunnel protocol
connection id long
drop cause id
counter bytes sdwan dropped long
sdwan sla-not-met
sdwan preferred-color-not-met
sdwan qos-queue-id
drop cause name
counter packets appqoe fec-d-pkts
counter packets appqoe fec-r-pkts
counter packets appqoe pkt-dup-d-pkts-orig
counter packets appqoe pkt-dup-d-pkts-dup
counter packets appqoe pkt-dup-r-pkts
counter packets sdwan pkt-cxp-d-pkts
counter bytes appqoe ssl-read
counter bytes appqoe ssl-written
counter bytes appqoe ssl-en-read
counter bytes appqoe ssl-en-written
counter bytes appqoe ssl-de-read
counter bytes appqoe ssl-de-written
appqoe ssl service type
appqoe ssl traffic type
appqoe ssl policy action
ETAInitialDataPacketOld
ETASequenceofPktLengthsandTimes
wlan_id
timestampAbsoluteMonitoring-intervalStart
timestampAbsoluteMonitoring-intervalEnd

NetQuest (PEN: 568)

NameCommunityBasicStandardPremium
MACSEC_packets
PWE3_w_ctrl_word_packets
PWE3_wo_ctrl_word_packets
GRE_packets
GTP_packets
IP-in-IP_packets
PPTP_packets
L2TP_packets
JA3C
JA3S
ssl_version
ssl_cipher
ssl_server_name
ssl_session_id
ssl_subject
ssl_issuer
ssl_client_subject
ssl_client_issuer
ssl_not_valid_before
ssl_not_valid_after
ssl_certificate_subject_key_size
ssl_cert_hash
dtls_common_name
dtls_server_name
dtls_certificate_issuer_cn
dtls_cipher
dtls_version
dtls_ja3
dtls_ja3s
dtls_subject
dtls_issuer
dtls_client_subject
dtls_not_valid_before
dlts_not_valid_after
dtls_certificate_subject_key_size
dtls_cert_hash
ssh_version
ssh_client
ssh_server
ssh_cipher_alg_cts
ssh_cipher_alg_stc
ssh_mac_alg_cts
ssh_mac_alg_stc
ssh_compression_alg_cts
ssh_compression_alg_stc
ssh_kex_alg_cts
ssh_kex_alg_stc
ssh_host_key_alg
ssh_fingerprint_hassh
ssh_fingerprint_hassh_server
dns_trans_id
dns_query
dns_qclass
dns_qtype
dns_rcode
dns_flags_codes
dns_TTLs
dns_response_ipv4_addr
dns_response_ipv6_addr
bgp_source_as
bgp_dest_as
bgp_next_hop_ip
http_method
http_host
http_uri
http_referrer
http_user_agent
http_request_body_len
http_response_body_len
http_status_code
http_status_msg
http_username
http_password
http_proxied
quic_version
quic_server_name
quic_user_agent
sip_call_id
sip_from
sip_to
sip_via
sip_connection_addr_ipv4
sip_connection_addr_ipv6
ospf_message_type
ospf_router_id
ospf_area_id
ospf_netmask
ospf_options
ospf_hello_interval
ospf_priority
ospf_dead_interval
ospf_designated_router
ospf_backup_router
ospf_neighbor
ospf_ls_age
ospf_ls_type
ospf_ls_id
ospf_ls_adv_router
ospf_ls_seq_number
ospf_ls_flags_v
ospf_ls_flags_e
ospf_ls_flags_b
ospf_link_id
ospf_link_data
ospf_link_type
ospf_ls_attach_router
ospf_ls_metric
ospf_external_fwd_addr
ospf_external_route_tag

Nokia, was Alcatel-Lucent (PEN: 637)

NameCommunityBasicStandardPremium
aaProt
aaApp
aaAppGrp
tcpSessionEstDelay
tcpDelayMin
tcpDelayMax
tcpDelayAvg
tcpDelayVariance
tcpDelaySampleCnt
tcpRetransmittedBytes
tcpRetransmittedPackets
aaSubType
sessionDirection
aaRecordType
rtpCodecName
rtpReceivedPackets
rtpLostPackets
rtpDiscardPackets
rtpOutOfSeqPackets
rtpBurstCount
rtpAvgBurstLengthMs
rtpAvgBurstLengthPkts
rtpGapCount
rtpAvgGapLengthMs
rtpAvgGapLengthPkts
rtpAvgRtDelay
MAPDV
MOSLQ
MOSCQ
MOSNOM
MOSReference
RLQ
RCQ
RG107
RNom
RBurst
RGap
rtpDegPacketLoss
rtpDegPacketDiscard
rtpDegCodecType
rtpDegDelay
rtpDegSignalLevel
rtpDegNoiseLevel
rtpDegEcho
rtpDegRecency
rtpAvgVoiceBw
rtpDegCodecQuantize
rtpDegCodecEncBwRestrict
rtpDegFrameRez
rtpDegFramePresentRate
rtpDegGoPLength
rtpDegNetBwConstraint
rtpDegAVSync
PPDVM
MOSA
rtpNumAudioChannels
rtpRefClockRate
rtpAvgAudioBw
rtpPeakAudioBw
MOSVAbsolute
MOSVRelative
MOSAV
VSTQ
estimatedPSNR
GoPType
avgGoPLength
avgInterIFrameGap
imageWidth
imageHeight
frameRate
slicesPerIFrame
SSRC
videoInterlaced
IFrameReceived
IFrameImpaired
PFrameReceived
PFrameImpaired
BFrameReceived
BFrameImpaired
SIFrameReceived
SIFrameImpaired
SPFrameReceived
SPFrameImpaired
rtpAvgVideoBw
rtpPeakVideoBw
frameInterArrivalJitter
IFrameInterArrivalJitter
avgFrameArrivalDelay
rtpPayloadType
rtpRtDelaySrc
natInsideSvcid
natOutsideSvcid
natSubString
sessionDurationMilliseconds
sessionStartSeconds
hostName
deviceId
deviceMfgId
deviceOsId
ipFamily
deviceOsVer1
deviceOsVer2
deviceOsVer3
anlType
anlTopology
anlCongestionState
sessionEndSeconds
apn
chargeId
mnc
imsi
msisdn
sgw-sgsnAddr
pgw-ggsnAddr
bsid
ratType
regionId
cellId
timezone
aaChargingGroup
flowAttr_video
flowAttr_abr_service
flowAttr_audio
flowAttr_encrypted
flowAttr_download
flowAttr_upload
flowAttr_realtime_communication
aaSubTetheringState
imei
roamingStatus
mcc
uli
chargingChar
customerId
plmnid
tcpSessionEstDelay_r
tcpRetransmittedBytes_r
tcpRetransmittedPackets_r
flowAttr_esni

Extreme Networks (PEN: 1916)

NameCommunityBasicStandardPremium
userName
appGroupName
srcHostName
dstHostName
netResponseTime
appResponseTime
serverAddress
nacProfile
detailedLocation
oneSidedFlow
clientLocation
serverLocation
metaData

UNINETT (PEN: 2428)

NameCommunityBasicStandardPremium
HIST_PKT_LEN
HIST_PKT_DIST
PAYLOAD
VAR_PKT_DIST
EXPVAL_PKT_DIST
VAR_PKT_LENGTH
EXPVAL_PKT_LENGTH
SUM_PKT_DIST
SUM_PKT_LENGTH
QSUM_PKT_DIST
QSUM_PKT_LENGTH
CONN_DIRECTION
PKT_REORDERED
SERVICE
RTP_JITTER
RTP_LOSTFRAC
RTP_LOSTPKTS
RTP_SEQCYCLES
MAXRATE_1SEC
MINRATE_1SEC
MAXRATE_100MS
MINRATE_100MS
MAXRATE_10MS
MINRATE_10MS
MAXRATE_1MS
MINRATE_1MS
TCPWIN_MAX
TCPWIN_MIN
TCPWIN_EFF
PIM_PACKETS

Juniper Networks (PEN: 2636)

NameCommunityBasicStandardPremium
ifa_headers
ifa_metadata
ifa_sampled_packet
Packet Loss Priority
Forwarding Class Name

Ixia Communications (PEN: 3054)

NameCommunityBasicStandardPremium
L7AppId
L7AppName
SrcCountryCode
SrcCountryName
SrcRegionCode
SrcRegionName
SrcCityName
SrcLatitude
SrcLongitude
DstCountryCode
DstCountryName
DstRegionCode
DstRegionNode
DstCityName
DstLatitude
DstLongitude
DeviceId
DeviceName
BrowserId
BrowserName
RevOctetDeltaCount
RevPacketDeltaCount
EncryptType
EncryptCipher
EncryptKeyLength
ImsiSubscriber
HttpUserAgent
HttpHostName
HttpUri
DnsRecordTxt
SrcAsName
DstAsName
Latency
DnsQuery
DnsAnswer
DnsClasses
ThreatType
ThreatIPv4
ThreatIPv6
RequestTime
DNSName
DnsIPv4Address
DNSIPv6Address
Sni
DhcpClientId
DhcpClientMac
DhcpMessageTimestamp
DhcpMessageType
DhcpLeaseDuration
DhcpServerName
RadiusTimestamp
RadiusEventTimestamp
RadiusUsername
RadiusNasIPv4
RadiusServiceType
RadiusFramedProtocol
RadiusFilterId
RadiusReplyMessage
RadiusCalledStationId
HttpConnection
HttpAccept
HttpAcceptLanguage
HttpAcceptEncoding
HttpReason
HttpServer
RadiusCallingStationId
HttpContentLength
HttpReferer
HttpUseragentCpu
EmailMsgId
EmailMsgDate
EmailMsgSubject
EmailMsgTo
EmailMsgFrom
EmailMsgCc
EmailMsgBcc
EmailMsgAttachments
TlsSrvrCert
TlsSrvrCertIssuer
TlsSrvrCertIssuerAttr
TlsSrvrCertIssuerVal
TlsSrvrCertSubject
TlsSrvrCertSubjectAttr
TlsSrvrCertSubjectVal
TlsSrvrCertVldNtBfr
TlsSrvrCertVldNtAftr
TlsSrvrCertSrlNum
TlsSrvrCertSignAlgo
TlsSrvrCertSubjPkiAlgo
TlsSrvrCertAltnames
TlsSrvrCertAltnamesAttr
TlsSrvrCertAltnamesVal
DnsPackets
DnsTransactionId
DnsOpcode
DnsRequestType
DnsResponseCode
DnsRecordTtl
DnsRawRdata
DnsResponseType
RadiusFramedIp
DnsQdCount
DnsAnCount
DnsNsCount
DnsArCount
DnsAuthAnswer
DnsTrucation
DnsRecursionDesired
DnsRecursionAvail
DnsRdataLen
DnsQuestions
DnsQueryType
DnsQueryName
DnsSectionType
DnsQrFlag
DnsCanonicalName
DnsMxDomain
DhcpAgentCircuitId
Ja3FingerprintString
TcpConnSetupTime
TcpAppResponseTime
TcpRetransPktCount
ConnAvgRtt
UdpAppResponseTime
QuicConnSetupTime
QuicConnRTT
QuicAppResponseTime
MatchedFilterName
gtp_IMSI
gtp_ULI_SAI_SAC
gtp_ULI_RAI_RAC
gtp_ULI_TAC
gtp_ULI_ECGI_E_NODEB_ID
gtp_ULI_CELL_ID
gtp_ULI_LAC
gtp_ULI_MCC
gtp_ULI_MNC
gtp_MSISDN
gtp_IMEI
gtp_RAT_type
gtp_ep_gen
gtp_up_TEID
gtp_down_TEID
gtp_up_ipv4_addr
gtp_down_ipv4_addr
gtp_up_ipv6_addr
gtp_down_ipv6_addr
gtp_up_QCI_QFI
gtp_down_QCI_QFI
gtp_up_APN_DNN
gtp_down_APN_DNN
HttpStatusCode
HttpRequestMethod
HttpMessageVersion

Citrix Systems, was Netscaler (PEN: 5951)

NameCommunityBasicStandardPremium
netscalerRoundTripTime
netscalerTransactionId
netscalerHttpReqUrl
netscalerHttpReqCookie
netscalerFlowFlags
netscalerConnectionId
netscalerSyslogPriority
netscalerSyslogMessage
netscalerSyslogTimestamp
netscalerHttpReqReferer
netscalerHttpReqMethod
netscalerHttpReqHost
netscalerHttpReqUserAgent
netscalerHttpRspStatus
netscalerHttpRspLen
netscalerServerTTFB
netscalerServerTTLB
netscalerAppNameIncarnationNumber
netscalerAppNameAppId
netscalerAppName
netscalerHttpReqRcvFB
netscalerHttpReqForwFB
netscalerHttpResRcvFB
netscalerHttpResForwFB
netscalerHttpReqRcvLB
netscalerHttpReqForwLB
netscalerMainPageId
netscalerMainPageCoreId
netscalerHttpClientInteractionStartTime
netscalerHttpClientRenderEndTime
netscalerHttpClientRenderStartTime
netscalerAppTemplateName
netscalerHttpClientInteractionEndTime
netscalerHttpResRcvLB
netscalerHttpResForwLB
netscalerAppTemplateID
netscalerDbLoginFlags
netscalerDbReqType
netscalerDbProtocolName
netscalerDbUserName
netscalerDbDatabaseName
netscalerDbCltHostName
netscalerDbReqString
netscalerDbRespStatusString
netscalerDbRespStatus
netscalerDbRespLength
netscalerClientRTT
netscalerHttpContentType
netscalerHttpReqAuthorization
netscalerHttpReqVia
netscalerHttpResLocation
netscalerHttpResSetCookie
netscalerHttpResSetCookie2
netscalerHttpReqXForwardedFor
netscalerConnectionChainID
netscalerConnectionChainHopCount
netscalerICASessionGuid
netscaleIcaClientVersion
netscalerIcaClientType
netscalerIcaClientIP
netscalerIcaClientHostName
netscalerAaaUsername
netscalerIcaDomainName
netscalerIcaClientLauncher
netscalerIcaSessionSetupTime
netscalerIcaServerName
netscalerIcaSessionReconnects
netscalerIcaRTT
netscalerIcaClientsideRXBytes
netscalerServersideRXBytes
netscalerIcaClientsidePacketsRetransmit
netscalerIcaServersidePacketsRetransmit
netscalerIcaClientsideRTT
netscalerIcaServersideRTT
netscalerIcaSessionUpdateBeginSec
netscalerIcaSessionUpdateEndSec
netscalerIcaChannelId1
netscalerIcaChannelId1Bytes
netscalerIcaChannelId2
netscalerIcaChannelId2Bytes
netscalerIcaChannelId3
netscalerIcaChannelId3Bytes
netscalerIcaChannelId4
netscalerIcaChannelId4Bytes
netscalerIcaChannelId5
netscalerIcaChannelId5Bytes
netscalerIcaConnectionPriority
netscalerApplicationStartupDuration
netscalerIcaLaunchMechanism
netscalerIcaApplicationName
netscalerApplicationStartupTime
netscalerIcaApplicationTerminationType
netscalerIcaApplicationTerminationTime
netscalerIcaSessionEndTime
netscalerIcaClientsideJitter
netscalerIcaServersideJitter
netscalerIcaAppProcessID
netscalerIcaAppModulePath
netscalerIcaDeviceSerialNo
netscalerMsiClientCookie
netscalerIcaFlags
netscalerIcaUsername
netscalerLicenseType
netscalerMaxLicenseCount
netscalerCurrentLicenseConsumed
netscalerIcaNetworkUpdateStartTime
netscalerIcaNetworkUpdateEndTime
netscalerIcaClientsideSRTT
netscalerIcaServersideSRTT
netscalerIcaClientsideDelay
netscalerIcaServersideDelay
netscalerIcaHostDelay
netscalerClientSideZeroWindowCount
netscalerServerSideZeroWindowCount
netscalerIcaClientSideRTOCount
netscalerIcaServerSideRTOCount
netscalerIcaL7ClientLatency
netscalerIcaL7ServerLatency
netscalerHttpDomainName
netscalerClientConnectionCoreID
netscalerClientConnectionTransactionID
netscalerCoMainPageGifNumScanned
netscalerCoMainPageGifNumOptimized
netscalerCoMainPageGifDeltaSzDec
netscalerCoMainPageGifdeltaSzInc
netscalerCoMainPageGifToPngNum
netscalerCoMainPageJpegNumScanned
netscalerCoMainPageJpegNumOptimized
netscalerCoMainPageJpegDeltaSzDec
netscalerCoMainPageJpegDeltaSzInc
netscalerCoMainPageJSNumScanned
netscalerCoMainPageJSNumOptimized
netscalerCoMainPageJSDeltaSzDec
netscalerCoMainPageJSDeltaSzInc
netscalerCoMainPageJSInlined
netscalerCoMainPageJSMoved
netscalerCoMainPageJSMinified
netscalerCoMainPageCSSNumScanned
netscalerCoMainPageCSSNumOptimized
netscalerCoMainPageCSSDeltaSzDec
netscalerCoMainPageCSSDeltaSzInc
netscalerCoMainPageCSSInlined
netscalerCoMainPageCSSMoved
netscalerCoMainPageCSSMinified
netscalerCoMainPageCSSImgsInlined
netscalerCoMainPageCSSCombined
netscalerCoMainPageCSSImport2Link
netscalerCoMainPageTotalScanned
netscalerCoMainPageTotalOptimized
netscalerCoMainPageTotalSzDec
netscalerCoMainPageTotalSzInc
netscalerCoMainPageHtmlMinifyDeltaSz
netscalerCoMainPageLazyLdJSSz
netscalerCoMainPagePngNumScanned
netscalerCoMainPagePngNumOptimized
netscalerCoMainPagePngDeltaSzDec
netscalerCoMainPagePngDeltaSzInc
netscalerCoMainPageTotImgScanned
netscalerCoMainPageTotImgOptimized
netscalerCoMainPageTotImgDeltaSzDec
netscalerCoMainPageTotImgDeltaSzInc
netscalerCoMainPageImgsInlined
netscalerCoMainPageImgsShrinked
netscalerCoMainPageImgsLazyLd
netscalerCoEmbedObjFlags
netscalerCoEmbedObjNumSize
netscalerCoEmbedObjType
netscalerCoEmbedObjUrl
netscalerCoMainPageGifToWebpNum
netscalerCoMainPageJpegToWebpNum
netscalerCoMainPageJpegToJxrNum
netscalerCoMainPagePngToWebpNum
netscalerCoMainPagePngToJxrNum
netscalerCacheServiceIPAdress
netscalerOriginServerIPAdress
netscalerFeatureEnabledForAppflow
netscalerNsicaSessionStatus
netscalerNsicaSessionClientIPAddress
netscalerNsicaSessionServerIPAddress
netscalerNsicaSessionServerPort
netscalerNsicaReconnectCount
netscalerNsicaACRCount
netscalerNsicaSessionClientPort
netscalerNsicaSessionTimestamp
netscalerAccessType
netscalerTcpPacketsRetransmited
netscalerTcpZeroWindowCount
netscalerTcpRtoCount
netscalerTcpJitter
netscalerStreamIdentifierName
netscalerStreamSessionName
netscalerStreamSessionBreachTime
netscalerStreamSessionBreachedMetric
netscalerStreamSessionInterval
netscalerStreamSessionMinThreshold
netscalerStreamSessionMaxThreshold
netscalerStreamSessionActualMetricValue
netscalerStreamSessionConfiguredBreachThreshold
netscalerStreamSessionConfiguredAcceptanceThreshold
netscalerStreamSessionBreachingTransactions
netscalerStreamSessionTotalTransactions
netscalerIcFlags
netscalerIcNostoreFlags
netscalerResponseMediaType
netscalerOriginResStatus
netscalerOriginRspLen
netscalerIcContGrpName
netscalerIcPolicyName
netscalerObservationDomainNumPoints
netscalerObservationPointId1
netscalerObservationPointId2
netscalerObservationPointId3
netscalerObservationPointId4
netscalerObservationPointId5
netscalerVPNsessionID
netscalerAccessInsightStatusCode
netscalerAccessInsightTimestamp
netscalerAccessInsightFlags
netscalerEPAID
netscalerAuthenticationStage
netscalerAuthenticationtype
netscalerAuthenticationDuration
netscalerDeviceType
netscalerDeviceID
netscalerDeviceLocation
netscalerPolicyName
netscalerAuthAgentName
netscalerGroupName
netscalerVPNSessionState
netscalerVPNSessionMode
netscalerIIPAddress
netscalerSsoAuthMethod
netscalerVPNRequestURL
netscalerSSORequestURL
netscalerLogonTicketInfo
netscalerSTATicket
netscalerSessionSharingKey
netscalerResourceName
netscalerBackendServerName
netscalerVPNSessionLogoutMode
netscalerVserverFQDN
netscalerApplicationByteCount
netscalerGatewayIP
netscalerGatewayPort
netscalerL7AvgClientLatency
netscalerL7MaxClientLatency
netscalerL7AvgServerLatency
netscalerL7MaxServerLatency
netscalerMinL7Latency
netscalerAppNameAppId1
netscalerSNIPAddress
netscalerL7LatencyWaitTime
netscalerL7LatencyNotifyInterval
netscalerL7LatencyMaxNotifyCount
netscalerL7LatencyThresholdFactor
netscalerAppfwViolationOccuredTime
netscalerAppfwAppNameId
netscalerAppfwProfileSafetyIndex
netscalerAppfwAppSafetyIndex
netscalerAppfwHttpMethod
netscalerAppfwAppThreatIndex
netscalerAppfwBlockFlags
netscalerAppfwTransformFlags
netscalerAppfwProfileSigAutoUpdate
netscalerAppfwSessionId
netscalerAppfwProfileName
netscalerAppfwSigName
netscalerAppfwReqUrl
netscalerAppfwGeoLocation
netscalerAppfwViolationTypeName1
netscalerAppfwViolationNameValue1
netscalerAppfwSigCategory1
netscalerAppfwViolationTypeName2
netscalerAppfwViolationNameValue2
netscalerAppfwSigCategory2
netscalerAppfwViolationTypeName3
netscalerAppfwViolationNameValue3
netscalerAppfwSigCategory3
netscalerSystemRuleFlags1
netscalerSystemSafetyIndex
netscalerAppfwProfileSignatureSafetyIndex
netscalerAppfwProfileSecChecksSafetyIndex
netscalerAppfwSigRuleEnabledFlags
netscalerAppfwSigRuleBlockFlags
netscalerAppfwSigRuleLogFlags
netscalerAppfwSigRuleStatsFlags
netscalerAppfwSigRuleFileName
netscalerAppfwSigRuleCategory1
netscalerAppfwSigRuleLogstring1
netscalerAppfwSigRuleCategory2
netscalerAppfwSigRuleLogstring2
netscalerAppfwSigRuleCategory3
netscalerAppfwSigRuleLogstring3
netscalerAppfwSigRuleCategory4
netscalerAppfwSigRuleLogstring4
netscalerAppfwSigRuleCategory5
netscalerAppfwSigRuleLogString5
netscalerAppfwNSLongitude
netscalerAppfwNSLatitude
netscalerAppfwProfileSigLogCount
netscalerAppfwProfileType
netscalerAppfwProfileBlockFlags
netscalerAppfwProfileLogFlags
netscalerAppfwProfileRelaxedFlags
netscalerAppfwProfileSigStatCount
netscalerAppfwProfileLearnFlags
netscalerAppfwIncarnationNumber
netscalerAppfwSequenceNumber
netscalerAppfwSigRuleID1
netscalerAppfwSigRuleID2
netscalerAppfwSigRuleID3
netscalerAppfwSigRuleID4
netscalerAppfwSigRuleID5
netscalerAppfwViolationLocation
netscalerAppfwViolationThreatIndex
netscalerAppfwViolationType
netscalerAppfwViolationSeverity
netscalerAppfwProfileStatsflags
netscalerAppfwProfileNoneFlags
netscalerAppfwProfileSigEnabled
netscalerAppfwProfileSigDisabled
netscalerAppfwProfileSigBlockCount
netscalerServerVersion
netscalerIcaSessionType
netscalerSmoothedRoundTripTime
netscalerFastRetxCount
netscalerSubscriberIdentifier
netscalerIprepSeverity
netscalerIprepHTTPMethod
netscalerIprepAppThreatIndex
netscalerIprepNSLongitude
netscalerIprepNSLatitude
netscalerIprepCategory
netscalerIprepAttackTime
netscalerIprepReputationScore
netscalerCSecExpression
netscalerNsicaSessionPreviousDeviceIP
netscalerSslServerCertSizeFE
netscalerSslServerCertSizeBE
netscalerSslClientCertSizeFE
netscalerSslClientCertSizeBE
netscalerSslSessionIDFE
netscalerSslSessionIDBE
netscalerSslFLagsFE
netscalerSslFLagsBE
netscalerSslHandshakeErrorMsg
netscalerSslErrFlag
netscalerSslCipherValueFE
netscalerSslCipherValueBE
netscalerSslSigHashAlgFE
netscalerSslSigHashAlgBE
netscalerIprepAppSafetyIndex
netscalerNextFactorPolicyLabel
netscalerVlanNumber
netscalerCurFactorPolicyLabel
netscalerSslSrvrCertSigHashBE
netscalerSslClntCertSigHashFE
netscalerSslClntCertSigHashBE
netscalerTcpSynAttackCntr
netscalerTcpSlowrisCntr
netscalerTcpzerowindowCntr
netscalerUrlCategory
netscalerUrlCategoryGroup
netscalerUrlCategoryReputation
netscalerResponderActionType
netscalerSsliDomainCategory
netscalerSsliDomainCategoryGroup
netscalerSsliDomainReputation
netscalerSsliPolicyAction
netscalerSsliExecutedAction
netscalerSsliReasonForAction
netscalerSsliDomainName
netscalerIprepGeoLocation
netscalerDetectedDomainName
netscalerVideoSessClientVlan
netscalerVideoTxnClientVlan
netscalerVideoTxnServerVlan
netscalerVideoTxnClientPort
netscalerVideoTxnServerPort
netscalerVideoSessClientIpv6Addr
netscalerVideoTxnClientIpv6Addr
netscalerVideoTxnServerIpv6Addr
netscalerVideoTxnMediaType
netscalerVideoTxnSessionID
netscalerVideoTxnPacingRate
netscalerCleartextVideoFlags
netscalerEncryptedVideoFlags
netscalerVideoTxnId
netscalerVideoTxnReqBytes
netscalerVideoTxnAppReqBytes
netscalerVideoTxnRespBytes
netscalerVideoTxnAppRespBytes
netscalerTxnClientIpv4Addr
netscalerTxnServerIpv4Addr
netscalerVideoTxnStarttime
netscalerVideoTxnEndtime
netscalerVideoTxnLastDataTime
netscalerVideoTxnStarttimeUsec
netscalerVideoTxnEndtimeUsec
netscalerVideoTxnLastDataTimeUsec
netscalerVideoSessMediaType
netscalerVideoSessFlags
netscalerVideoSessTxnCount
netscalerVideoSessID
netscalerVideoSessDuration
netscalerVideoSessAbsStarttime
netscalerVideoSessReqbytes
netscalerVideoSessAppReqBytes
netscalerVideoSessRespBytes
netscalerVideoSessAppRespBytes
netscalerVideoSessPacingRate
netscalerVideoSessClientIP4
netscalerClientIP
netscalerVserverIP
netscalerSslErrAppName
netscalerTempVPNsessionID
netscalerSslSrvrCertSigHashFE
netscalerClientMss
netscalerUrlsetMatched
netscalerUrlsetPrivate
netscalerSsliurlsetMatched
netscalerSsliurlsetPrivate
netscalerAaaUserEmailId
netscalerCategoryDomainSource
netscalerCategoryDomainName
netscalerTenantName
netscalerNsPartitionId
netscalerNsPartitionName
netscalerVideoTxnSessionDiameterTimestamp
netscalerUrlCatPolicyName
netscalerVideoTxnSessionSubscriberID
netscalerVideoTxnSessionTimestamp
netscalerVideoTxnSessionTcpTimestamp
netscalerVideoTxnSessionSubscriberSessionID
netscalerUrlCategoryactionReason
netscalerVPNsessionIdTemp
netscalerTcpClntConnRstCode
netscalerTcpSrvrConnRstCode
netscalerClntTcpPacketsRetransmited
netscalerSrvrTcpPacketsRetransmited
netscalerNgsConnectionGuid
netscalerNgsUsername
netscalerNgsDomainName
netscalerNgsProductName
netscalerNgsRecordType
netscalerNgsUsageTransactionId
netscalerNgsUsageUpdatStartTime
netscalerNgsUsageUpdateEndTime
netscalerNgsClientsideRXBytes
netscalerNgsServersideRXBytes
netscalerNgsClientsideWireRXBytes
netscalerNgsServersideWireRXBytes
netscalerTransportProtocolType
netscalerNgsAppId
netscalerNgsAppName
netscalerAppFqdn
netscalerNgsAppType
netscalerRate_limit_identifier_name
netscalerHttp2SlowrisCntr
netscalerRequestURL
netscalerAAAUsername
netscalerAuthenticationstage
netscalerAuthenticationType
netscalerAuthenticationstatuscode
netscalerAuthPolicyActionName
netscalerAuthSessionID
netscalerGiTotalBytesSent
netscalerGiTotalBytesRecvd
netscalerClientTypeFlags

Calix Networks (PEN: 6321)

NameCommunityBasicStandardPremium
hostname
shelf
slot
port
ont-id
svlan
cvlan
sample-time
group
bin-duration
bin-number
start-time
end-time
time-elapsed
suspect
cause
mac
ONT-ifstats-aid
tx-octets
tx-pkts
tx-discards
tx-errors
rx-octets
rx-pkts
rx-discards
rx-errors
OLT-pon-util-aid
upstream-octets
downstream-octets
admitted fixed upstream bw
available fixed upstream bw
admitted excess upstream bw
available excess upstream bw
admitted-assured-upstream-bw
available-assured-upstream-bw
fixed-upstream-bytes
assured-upstream-bytes
excess-upstream-bytes
ingress-bucket-seconds
ingress-bucket-bps
ingress-bucket-percent
egress-bucket-seconds
egress-bucket-bps
egress-bucket-percent
ONT-evcstats-aid
green-octets-uni
yellow-octets-uni
red-octets-uni
green-pkts-uni
yellow-pkts-uni
red-pkts-uni
octets-policer-discards
pkts-policer-discards
green-octets-pon
yellow-octets-pon
green-pkts-pon
yellow-pkts-pon
OLT-pon-optical-aid
power-feed-voltage
rx-optical-power
mean-optical-launch-power
laser-bias-current
temperature
optical-channel
OLT-ont-bin-aid
upstream-bip-errors
upstream-missed-bursts
upstream-gem-hec-errors
upstream-bip8-err-sec
upstream-bip8-severely-err-sec
upstream-bip8-unavail-sec
upstream-missed-bursts-err-sec
upstream-fec-corrected-bytes
upstream-fec-corrected-code-words
upstream-fec-uncorrected-code-words
upstream-fec-total-code-words
upstream-fec-sec
downstream-bip-errors
downstream-bip8-err-sec
downstream-bip8-severely-err-sec
downstream-bip8-unavail-sec
downstream-fec-corrected-bytes
downstream-fec-corrected-code-words
downstream-fec-uncorrected-code-words
downstream-fec-total-code-words
downstream-fec-sec
ONT-eth-util-aid
fcs-errors
excessive-collision
late-collision
frame-too-long
buffer-overflow-xmit
buffer-overflow-recv
single-collision
multiple-collision
sqe-counter
deferred-xmit-count
internal-mac-xmit-error
internal-mac-recv-error
carrier-sense-error
alignment-error
upstream-drop-events
upstream-packets
upstream-broadcast-packets
upstream-multicast-packets
upstream-unicast-packets
upstream-crc-errored-packets
upstream-oversize-packets
upstream-undersize-packets
upstream-packets-64-octets
upstream-packets-64-to-127-octets
upstream-packets-128-to-255-octets
upstream-packets-256-to-511-octets
upstream-packets-512-to-1023-octets
upstream-packets-1024-to-1518-octets
downstream-drop-events
downstream-packets
downstream-broadcast-packets
downstream-multicast-packets
downstream-unicast-packets
downstream-crc-errored-packets
downstream-oversize-packets
downstream-undersize-packets
upstream-gem-frames
upstream-gem-payload-bytes
downstream-gem-frames
downstream-gem-payload-bytes
gem-encryption-key-errors
mep-stats-aid
ccm-received
ccm-transmitted
ccm-received-rdi
ccm-transmitted-rdi
ccm-received-bad-sender-id
ccm-received-bad-port-status
ccm-received-bad-if-status
ccm-received-bad-seq-errors
dmm-transmitted
dmr-received
dmm-received
dmr-transmitted
dm1-transmitted
dm1-received
slm-transmitted
slr-received
slm-received
slr-Transmitted
lmm-Transmitted
lmr-Received
lmm-Received
lmr-Transmitted
ltm-transmitted
ltr-received
ltm-received
ltr-transmitted
ltr-unexpected
lbm-transmitted
lbr-received
lbm-received
lbr-transmitted
lbr-received-out-of-order
lbr-received-bad-msdu
mip-stats-aid
up-mhf-lbm-received
up-mhf-lbr-transmitted
up-mhf-ltm-received
up-mhf-ltm-forwarded
up-mhf-ltr-transmitted
dn-mhf-lbm-received
dn-mhf-lbr-transmitted
dn-mhf-ltm-received
dn-mhf-ltm-forwarded
dn-mhf-ltr-transmitted
delay-measurement-aid
stats-index
end-time
elapsed-time
suspect
frame-delay-two-way-min
frame-delay-two-way-max
frame-delay-two-way-avg
frame-delay-forward-min
frame-delay-forward-max
frame-delay-forward-avg
frame-delay-backward-min
frame-delay-backward-max
frame-delay-backward-avg
inter-frame-delay-variation-two-way-min
inter-frame-delay-variation-two-way-max
inter-frame-delay-variation-two-way-avg
inter-frame-delay-variation-forward-min
inter-frame-delay-variation-forward-max
inter-frame-delay-variation-forward-avg
inter-frame-delay-variation-backward-min
inter-frame-delay-variation-backward-max
inter-frame-delay-variation-backward-avg
frame-delay-range-two-way-max
frame-delay-range-two-way-avg
frame-delay-range-forward-max
frame-delay-range-forward-avg
frame-delay-range-backward-max
frame-delay-range-backward-avg
out-oam-pdus
in-oam-pdus
loss-measurement-aid
stats-index
end-time
elapsed-time
suspect
forward-transmitted-frames
forward-received-frames
forward-min-frame-loss-ratio
forward-max-frame-loss-ratio
forward-avg-frame-loss-ratio
backward-transmitted-frames
backward-received-frames
backward-min-frame-loss-ratio
backward-max-frame-loss-ratio
backward-avg-frame-loss-ratio
out-oam-pdus
in-oam-pdus
lm-availability-aid
stats-index
end-time
elapsed-time
suspect
forward-high-loss-intervals
backward-high-loss-intervals
forward-consecutive-high-loss-intervals
backward-consecutive-high-loss-intervals
forward-available-indicators
backward-available-indicators
forward-unavailable-indicators
backward-unavailable-indicators
forward-min-frame-loss-ratio
forward-max-frame-loss-ratio
forward-avg-frame-loss-ratio
backward-min-frame-loss-ratio
backward-max-frame-loss-ratio
backward-avg-frame-loss-ratio
subscriber-flows-aid
flow-direction
flow-number
flow-pkts
flow-bytes
flow-drop-pkts
flow-drop-bytes
ONT-eth-total-aid
upstream-discard-events
downstream-discard-events
dowstream-discarded-frames
bng-dhcp-pool-aid
pool-name
configured-pool-size
leases-in-grace
active-leases
max-leases
min-leases
avg-leases
offers-sent
offers-accepted
requests-granted
requests-declined
request-timeouts
lease-renewals
lease-timer-expiries
grace-timer-expiries
bng-dhcp-subscriber-aid
configured-dynamic-subscribers
active-dynamic-ips
active-dynamic-subscribers
max-active-dynamic-subscribers
min-active-dynamic-subscribers
avg-active-dynamic-subscribers
bng-static-subscriber-aid
configured-active-subscribers
active-static-ips
active-static-subscribers
max-active-static-subscribers
min-active-static-subscribers
avg-active-static-subscribers
bng-gx-counter-aid
tx-ccr-i
rx-cca-i
tx-ccr-u
rx-cca-u
rx-rar
tx-raa
raa-session-id-mismatch
pcrf-timer-expiries
configured-subscribers-with-pcrf-enabled
active-subscribers-with-pcrf-enabled
active-default-subscribers-with-pcrf-enabled
bng-url-redirect-aid
url-redirect-subscribers
url-redirect-policies-applied
url-updates
bng-policy-mgmt-aid
dynamic-policy-apply-requests
dynamic-policy-apply-successes
dynamic-policy-apply-failures
bng-arp-counters-id
rx-arp-req
tx-arp-resp
arp-timer-expiries
bng-diameter-client-aid
diameter-client-name
tx-cer
rx-cea
rtx-msg
msg-timeout
peer-up
peer-down
watchdog-timer-expiries
peer-disconnect
bng-radius-client-aid
radius-client-name
tx-accounting-start
tx-accounting-interim
tx-accounting-stop
rtx-accounting-start
rtx-accounting-interim
rtx-accounting-stop
rx-accounting-success-resp
rx-accounting-failure-resp
interface-ethernet-aid
if-index
drop-events
octets
pkts
broadcast-pkts
multicast-pkts
crc-align-errors
undersize-pkts
oversize-pkts
fragments
pkts-64
pkts-65to127
pkts-128to255
pkts-256-511
pkts-512to1023
pkts-1024to1518
pkts-1519to2047
pkts-2048to4095
pkts-4096to9216
pkts-9217to16383
rx-unicast-pkts
rx-multicast-pkts
rx-broadcast-pkts
rx-pause-frames
rx-unknown-protos
tx-unicast-pkts
tx-multicast-pkts
tx-broadcast-pkts
tx-pause-frames
align-errors
jabbers
rx-utilization
tx-utilization
rx-pps
tx-pps
rx-bps
tx-bps
role
interface-lag-aid
pon-ont-type-util-aid
pon-ont-util-aid
upstream-bytes
downstream-bytes
upstream-percentage
downstream-percentage
OLT-pon-dyn-agg-util-total-aid
upstream-octets-internet
downstream-octets-internet
upstream-octets-ibont
downstream-octet-ibont
upstream-octets-soho
downstream-octets-soho
oper-state
admin-state
tx-power
tx-voltage
tx-bias
rx-available-bandwidth
tx-available-bandwidth
upstream-gal-discarded-frames
cfg-speed
tx-opt-level
ne-opt-signal-level
range-length
curr-version
uptime
rfavo received-optical-power
rx-unicast-octets
rx-multicast-octets
rx-broadcast-octets
tx-unicast-octets
tx-multicast-octets
tx-broadcast-octets
eth-vlan-monitor-aid
lag-vlan-monitor-aid
module-temperature
module-tx-power
module-vcc
cpu-usage
uptime
temp-sensor
mpls-stat-aid
ldp-peer
tx-initialization
rx-initialization
tx-address
rx-address
tx-address withdraw
rx-address withdraw
tx-label mapping
rx-label mapping
tx-label withdraw
rx-label withdraw
tx-label release
rx-label release
tx-label request
rx-label request
tx-label abort request
rx-label abort request
tx-notification
rx-notification
tx-keepalive
rx-keepalive
neighbor-v6
in-opens
out-opens
in-notifications
out-notifications
in-updates
out-updates
in-keepalives
out-keepalives
in-total-messages
out-total-messages
vrf-name
bgp-stat-aid
neighbor
ospf-stat-aid
sample-time
rx-hello
tx-hello
rx-db-des
tx-db-des
rx-ls-req
tx-ls-req
rx-ls-upd
tx-ls-upd
rx-ls-ack
tx-ls-ack
route-summary-stat-aid
address-family
bgp
connected
isis
ospf
static
total

CERT Coordination Center (PEN: 6871)

NameCommunityBasicStandardPremium
obsoleteReverseOctetTotalCount
obsoleteReversePacketTotalCount
initialTCPFlags
unionTCPFlags
obsoleteReverseInitialTCPFlags
obsoleteReverseUnionTCPFlags
payload
obsoleteReversePayload
obsoleteReverseTcpSequenceNumber
reverseFlowDeltaMilliseconds
obsoleteReverseVlanId
silkFlowType
silkFlowSensor
silkTCPState
silkAppLabel
payloadEntropy
osName
osVersion
firstPacketBanner
secondPacketBanner
flowAttributes
expiredFragmentCount
assembledFragmentCount
meanFlowRate
meanPacketRate
flowTableFlushEventCount
flowTablePeakCount
yafFlowKeyHash
osFingerPrint
httpServerString
httpUserAgent
httpGet
httpConnection
httpVersion
httpReferer
httpLocation
httpHost
httpContentLength
httpAge
httpAccept
httpAcceptLanguage
httpContentType
httpResponse
pop3TextMessage
ircTextMessage
tftpFilename
tftpMode
slpVersion
slpMessageType
slpString
ftpReturn
ftpUser
ftpPass
ftpType
ftpRespCode
imapCapability
imapLogin
imapStartTLS
imapAuthenticate
imapCommand
imapExists
imapRecent
rtspURL
rtspVersion
rtspReturnCode
rtspContentLength
rtspCommand
rtspContentType
rtspTransport
rtspCSeq
rtspLocation
rtspPacketsReceived
rtspUserAgent
rtspJitter
sipInvite
sipCommand
sipVia
sipMaxForwards
sipAddress
sipContentLength
sipUserAgent
smtpHello
smtpFrom
smtpTo
smtpContentType
smtpSubject
smtpFilename
smtpContentDisposition
smtpResponse
smtpEnhanced
sshVersion
nntpResponse
nntpCommand
dnsQueryResponse
dnsQRType
dnsAuthoritative
dnsNXDomain
dnsRRSection
dnsQName
dnsCName
dnsMXPreference
dnsMXExchange
dnsNSDName
dnsPTRDName
sslCipher
sslClientVersion
sslServerCipher
sslCompressionMethod
sslCertVersion
sslCertSignature
sslCertIssuerCountryName
sslCertIssuerOrgName
sslCertIssuerOrgUnitName
sslCertIssuerZipCode
sslCertIssuerState
sslCertIssuerCommonName
sslCertIssuerLocalityName
sslCertIssuerStreetAddress
dnsTTL
sslCertSubCountryName
sslCertSubOrgName
sslCertSubOrgUnitName
sslCertSubZipCode
sslCertSubState
sslCertSubCommonName
sslCertSubLocalityName
sslCertSubStreetAddress
dnsTXTData
dnsSOASerial
dnsSOARefresh
dnsSOARetry
dnsSOAExpire
dnsSOAMinimum
dnsSOAMName
dnsSOARName
dnsSRVPriority
dnsSRVWeight
dnsSRVPort
dnsSRVTarget
httpCookie
httpSetCookie
smtpSize
mysqlUsername
mysqlCommandCode
mysqlCommandText
dnsID
dnsAlgorithm
dnsKeyTag
dnsSigner
dnsSignature
dnsDigest
dnsPublicKey
dnsSalt
dnsHashData
dnsIterations
dnsSignatureExpiration
dnsSignatureInception
dnsDigestType
dnsLabels
dnsTypeCovered
dnsFlags
dhcpFingerPrint
dhcpVendorCode
sslCertSerialNumber
sslObjectType
sslObjectValue
sslCertValidityNotBefore
sslCertValidityNotAfter
sslPublicKeyAlgorithm
sslPublicKeyLength
smtpDate
httpAuthorization
httpVia
httpX-Forwarded-For
httpExpires
httpRefresh
httpIMEI
httpIMSI
httpMSISDN
httpSubscriber
httpAcceptCharset
httpAcceptEncoding
httpAllow
httpDate
httpExpect
httpFrom
httpProxyAuthentication
httpUpgrade
httpWarning
httpDNT
httpX-Forwarded-Proto
httpX-Forwarded-Host
httpX-Forwarded-Server
httpX-DeviceID
httpX-Profile
httpLastModified
httpContentEncoding
httpContentLanguage
httpContentLocation
httpX-UA-Compatible
dnp3SourceAddress
dnp3DestinationAddress
dnp3Function
dnp3ObjectData
modbusData
ethernetIPData
rtpPayloadType
sslRecordVersion
mptcpInitialDataSequenceNumber
mptcpReceiverToken
mptcpMaximumSegmentSize
mptcpAddressID
mptcpFlags
sslServerName
sslCertificateHash
sslCertificate
dhcpOption
sslCertificateSHA1
sslCertificateMD5
nDPIL7Protocol
nDPIL7SubProtocol
rrIPv4
rrIPv6
DNSKEY_protocolIdentifier
smallPacketCount
nonEmptyPacketCount
dataByteCount
averageInterarrivalTime
standardDeviationInterarrivalTime
firstNonEmptyPacketSize
maxPacketSize
firstEightNonEmptyPacketDirections
standardDeviationPayloadLength
tcpUrgentCount
largePacketCount
tombstoneId
exporterConfiguredId
exporterUniqueId
certToolId
dnsRName
dnsHitCount
observedDataTotalCount
observedData
templateName
templateDescription
Reverse flow initialTCPFlags
Reverse flow unionTCPFlags
Reverse flow payload
Reverse flow payloadEntropy
Reverse flow osName
Reverse flow osVersion
Reverse flow firstPacketBanner
Reverse flow secondPacketBanner
Reverse flow flowAttributes
Reverse flow osFingerPrint
Reverse flow dhcpFingerPrint
Reverse flow dhcpVendorCode
Reverse flow rtpPayloadType
Reverse flow smallPacketCount
Reverse flow nonEmptyPacketCount
Reverse flow dataByteCount
Reverse flow averageInterarrivalTime
Reverse flow standardDeviationInterarrivalTime
Reverse flow firstNonEmptyPacketSize
Reverse flow maxPacketSize
Reverse flow firstEightNonEmptyPacketDirections
Reverse flow standardDeviationPayloadLength
Reverse flow tcpUrgentCount
Reverse flow largePacketCount

VMware (PEN: 6876)

NameCommunityBasicStandardPremium
tenantProtocol
tenantSourceIPv4
tenantDestIPv4
tenantSourceIPv6
tenantDestIPv6
tenantSourcePort
tenantDestPort
egressInterfaceAttr
vxlanExportRole
ingressInterfaceAttr
tunnelType
tunnelKey
tunnelSourceIPv4Address
tunnelDestinationIPv4Address
tunnelProtocolIdentifier
tunnelSourceTransportPort
tunnelDestinationTransportPort
virtualObsID
ruleId
vmUuid
vnicIndex
sessionFlags
flowDirection
algControlFlowId
algType
algFlowType
averageLatency
retransmissionCount
vifUuid
vifId

CESNET (PEN: 8057)

NameCommunityBasicStandardPremium
DNS_ANSWERS
DNS_RCODE
DNS_NAME
DNS_QTYPE
DNS_CLASS
DNS_RR_TTL
DNS_RLENGTH
DNS_RDATA
DNS_PSIZE
DNS_DO
DNS_ID
DNS_ATYPE
DNS_A
DNS_AAAA
NTP_LEAP
NTP_VERSION
NTP_MODE
NTP_STRATUM
NTP_POLL
NTP_PRECISION
NTP_DELAY
NTP_DISPERSION
NTP_REF_ID
NTP_REF
NTP_ORIG
NTP_RECV
NTP_SENT
ARP_HA_FORMAT
ARP_PA_FORMAT
ARP_OPCODE
ARP_SRC_HA
ARP_SRC_PA
ARP_DST_HA
ARP_DST_PA
SIP_MSG_TYPE
SIP_STATUS_CODE
SIP_CALL_ID
SIP_CALLING_PARTY
SIP_CALLED_PARTY
SIP_VIA
SIP_USER_AGENT
SIP_REQUEST_URI
SIP_CSEQ
SMTP_FLAGS
FLOWDIR_SYN
HB_TYPE
HB_DIR
HB_SIZE_MSG
HB_SIZE_PAYLOAD
HTTP_REQUEST_METHOD_ID
HTTP_REQUEST_HOST
HTTP_REQUEST_URL
HTTP_REQUEST_REFERER
HTTP_REQUEST_AGENT
HTTP_RESPONSE_STATUS_CODE
HTTP_RESPONSE_CONTENT_TYPE
HTTP_RESPONSE_TIME
HTTP_REQUEST_HOST
HTTP_RESPONSE_TIME
SMTP_COMMAND_FLAGS
SMTP_MAIL_CMD_COUNT
SMTP_RCPT_CMD_COUNT
SMTP_FIRST_SENDER
SMTP_FIRST_RECIPIENT
SMTP_STAT_CODE_FLAGS
SMTP_2XX_STAT_CODE_COUNT
SMTP_3XX_STAT_CODE_COUNT
SMTP_4XX_STAT_CODE_COUNT
SMTP_5XX_STAT_CODE_COUNT
SMTP_DOMAIN
HTTP_REQUEST_RANGE
SIPMethod
SIPStatusCode
SIPRequestURI
SIPFrom
SIPTo
SIPContact
SIPVia
SIPRoute
SIPRecordRoute
VENOM

LANcope, now Cisco (PEN: 8712)

NameCommunityBasicStandardPremium
FlowSensorInitiator
FlowSensorTCPSYNACKTotalCount
FlowSensorTCPSRSTotalCount
FlowSensorRoundTripTime
FlowSensorServerResponseTime
FlowSensorRetransmits
FlowSensorTCPBadTotalCount
FlowSensorTCPFragTotalCount
FlowSensorSourceEmailIn
FlowSensorSourceEmailOut
FlowSensorSourceEmailInMessages
FlowSensorSourceEmailOutMessages
FlowSensorSourceEmailInTrys
FlowSensorSourceEmailOutTrys
FlowSensorDestinationEmailIn
FlowSensorDestinationEmailOut
FlowSensorDestinationEmailInMessages
FlowSensorDestinationEmailOutMessages
FlowSensorDestinationEmailInTrys
FlowSensorDestinationEmailOutTrys
FlowSensorTraces
FlowSensorEmbeddedICMPProtocol
FlowSensorEmbeddedICMPType
FlowSensorEmbeddedICMPCode
FlowSensorApplicationIdentifier
FlowSensorBadFlagXmas
FlowSensorBadFlagSYNFIN
FlowSensorBadFlagBadRST
FlowSensorBadFlagNoACK
FlowSensorBadFlagURG
FlowSensorBadFlagNoFlag
FlowSensorShortFragAttack
FlowSensorFragPacketTooShort
FlowSensorFragPacketTooLong
FlowSensorFragPacketDifferentSizes
FlowSensorApplicationDetails
FlowSensorTrustsecSourceIdentifier
EndpointFlowProcessAccount
EndpointFlowProcessName
EndpointFlowProcessHash
EndpointFlowParentProcessAccount
EndpointFlowParentProcessName
EndpointFlowParentProcessHash

SonicWALL (PEN: 8741)

NameCommunityBasicStandardPremium
TIME_STAMP
FLOW_IDENTIFIER
INITIATOR_GW_MAC
RESPONDER_GW_MAC
INITIATOR_IP_ADDR
RESPONDER_IP_ADDR
INITIATOR_GW_IP_ADDR
RESPONDER_GW_IP_ADDR
INITIATOR_IFACE
RESPONDER_IFACE
INITIATOR_PORT
RESPONDER_PORT
INIT_TO_RESP_PKTS
INIT_TO_RESP_OCTETS
RESP_TO_INIT_PKTS
RESP_TO_INIT_OCTETS
FLOW_START_TIME
FLOW_END_TIME
INTERNAL_FLAGS
PROTOCOL_TYPE
FLOW_TO_APPLICATION_ID
FLOW_TO_USER_ID
FLOW_TO_IPS_ID
FLOW_TO_VIRUS_ID
FLOW_TO_SPYWARE_ID
TEMPLATE_IDENTIFIER
TABLE_NAME
COLUMN_IDENTIFIER
COLUMN_NAME
COLUMN_TYPE
COLUMN_STANDARD_IPFIX_ID
USER_INDEX
USER_NAME
USER_ID
USER_DOMAIN_NAME
USER_AUTH_TYPE
APP_INDEX
APP_ID
APP_NAME
APP_CAT_ID
APP_CAT_NAME
APP_SIG_ID
GAV_INDEX
GAV_NAME
GAV_SIG_ID
IPS_INDEX
IPS_NAME
IPS_CAT_ID
IPS_CAT_NAME
IPS_SIG_ID
ASPY_INDEX
ASPY_NAME
ASPY_PROD_ID
ASPY_PROD_NAME
ASPY_SIG_ID
URL_NAME
URL_IP
RATING_INDEX
RATING_NAME
REGION_ID
COUNTRY_ID
COUNTRY_NAME
REGION_NAME
LOCATION_IP
LOCATION_REGION_ID
LOCATION_DOMAIN_NAME
IF_STAT_IFACE
IF_STAT_IN_PKTS_RATE
IF_STAT_OUT_PKTS_RATE
IF_STAT_IN_OCTETS_RATE
IF_STAT_OUT_OCTETS_RATE
IF_STAT_IN_PKT_SIZE
IF_STAT_OUT_PKT_SIZE
IF_STAT_CONN_RATE
FLOW_INIT_OCTETS_RATE
FLOW_RESP_OCTETS_RATE
FLOW_INIT_PKT_RATE
FLOW_RESP_PKT_RATE
FLOW_INIT_PKT_SIZE
FLOW_RESP_PKT_SIZE
IF_STAT_IF_NAME
IF_STAT_IF_TYPE
IF_STAT_IF_SPEED
IF_STAT_IF_STATE
IF_STAT_IF_MTU
IF_STAT_IF_MODE
URL_FLOW_ID
URL_TIME_ID
CORE_STAT_CORE_ID
CORE_STAT_CORE_UTIL
VOIP_FLOW_ID
VOIP_TIME_ID
VOIP_INIT_CALL_ID
VOIP_RESP_CALL_ID
MEDIA_TYPE
MEDIA_PROTOCOL
SERVICE_NAME
SERVICE_IP_TYPE
SERVICE_PORT_BEGIN
SERVICE_PORT_END
SPAM_SESS_ID
SPAM_FLOW_ID
SPAM_TIME_ID
SPAM_SPAMMER
SPAM_TYPE
SPAM_TO_E_MAIL
SPAM_FROM_E_MAIL
MEM_TOTAL_RAM
MEM_AVAIL_RAM
MEM_USED_RAM
MEM_DB_RAM
MEM_FLOW_COUNT
MEM_PER_FLOW
DEV_IFACE_ID
DEV_IP_ADDR
DEV_MAC_ADDR
DEV_NAME
VPN_IN_SPI_ID
VPN_OUT_SPI_ID
VPN_TUNNEL_NAME
VPN_LOCAL_GW
VPN_REMOTE_GW
VPN_TUNNEL_IFACE_ID
VPN_POLICY_TYPE
VPN_PROTOCOL_TYPE
VPN_ENCRYPTION_TYPE
VPN_AUTHENTICATION_TYPE
VPN_START_TIME
VPN_END_TIME
INIT_VPN_SPI_OUT
RESP_VPN_SPI_OUT
INIT_TO_RESP_DELTA_PKTS
INIT_TO_RESP_DELTA_OCTETS
RESP_TO_INIT_DELTA_PKTS
RESP_TO_INIT_DELTA_OCTETS
FLOW_BLOCK_REASON
IF_STAT_MAC_ADDRESS
IF_STAT_IP_ADDRESS
IF_STAT_SECURITY_TYPE
IF_STAT_ZONE_NAME
USER_IP_ADDR
URL_RATING_VAL1
URL_RATING_VAL2
URL_RATING_VAL3
URL_RATING_VAL4
APP_BWM_ATTR
VOIP_INIT2RESP_LOST_PKTS
VOIP_RESP2INIT_LOST_PKTS
VOIP_INIT2RESP_AVG_LATENCY
VOIP_INIT2RESP_MAX_LATENCY
VOIP_RESP2INIT_AVG_LATENCY
VOIP_RESP2INIT_MAX_LATENCY
APP_CONTENT_TYPE
SNWL_OPTION
APP_RISK_ATTR
APP_TECH_ATTR
APP_ATTR_BIT_MASK
TOP_APPS_SIGID
TOP_APPS_APPNAME
TOP_APPS_RATE

Sophos, was Astaro AG (PEN: 9789)

NameCommunityBasicStandardPremium
afcProtocol
afcProtocolName
flowDirection

Barracuda Networks, was phion (PEN: 10704)

NameCommunityBasicStandardPremium
Timestamp
LogOp
TrafficType
FW_Rule
ServiceName
Reason
ReasonText
BindIPv4Address
BindTransportPort
ConnIPv4Address
ConnTransportPort
AuditCounter

F5 Networks (PEN: 12276)

NameCommunityBasicStandardPremium
messageSeverity
partitionName
flowId
errdefsMsgNo
bigipMgmtIPv4Address
bigipMgmtIPv6Address
queryName
dnsQueryType
contextName
bigipHostName
deviceVendor
deviceProduct
deviceVersion
msgName
vlanName
ipfixMsgNo
sipMethodName
sipCaller
sipCallee
attackId (dosAttackId)
attackName (dosAttackName)
packetsReceived (dosPacketsReceived)
packetsDropped (dosPacketsDropped)
contextType
aclPolicyType
aclPolicyName
transIpProtocol
transSourceIPv4Address
transSourceIPv6Address
transSourcePort
transDestinationIPv4Address
transDestinationIPv6Address
transDestinationPort
transVlanName
transRouteDomain
saTransType
saTransPool
aclRuleName
action
dropReason
attackEvent (dosAttackEvent)
ipintelligenceThreatName
destinationGeo
sourceGeo
ipintelligencePolicyName
attackType
applicationCategoryId
classification
flowStartMilliSeconds
flowStartSeconds
flowStopMilliSeconds
flowStopSeconds
recordType
reportId
reportVersion
3gppParameters
concurrentFlows
durationSec
lastRecordSent
newFlows
recordReason
successfulTransactions
terminatedFlows
subscriberId
subscriberIdType
totalTransactions
httpHostname
httpHostnameTruncated
httpResponseCode
httpUrl
httpUrlTruncated
httpUserAgent
httpUserAgentTruncated
transactionNumber
skippedTransactions
transactionStartMilliSeconds
transactionStartSeconds
transactionStopMilliSeconds
transactionStopSeconds
urlCategoryId
downlinkVolume
uplinkVolume
observationTimeSeconds
timestampMsec
vlanId
sourceUser
logprofileName
logMsgDrops
logMsgName
sourceFqdn
destinationFqdn

Fraunhofer FOKUS (PEN: 12325)

NameCommunityBasicStandardPremium
revOctetDeltaCount
revPacketDeltaCount
rttmean_usec
rttmin_usec
rttmax_usec
ident
lostPackets
owdvar_usec
owdvarmean_usec
owdvarmin_usec
owdvarmax_usec
owdsd_usec
owd_usec
owdmean_usec
owdmin_usec
owdmax_usec
taskId
tstamp_sec
tstamp_nsec
pktLength
pktId
startTime
endTime
rtt_usec
flowCreationTimeUsec
flowEndTimeUsec
tcPackets
tcBytes
tcRate_bps
tcRrate_pps
tc_qlen
tcbacklog
tcDrops
tcRequeues
tcOverlimits
owdvarmean_nsec
owdvarmin_nsec
owdvarmax_nsec
sourceIPv4FanOut
destinationIPv4FanIn
packetArrivalMean
packetArrivalVar
sessionId
transactionId
encryptedData128
encryptedData256
decryptionKey
keyShare128
keyShare256
keyShareAdp
cryptoInitVector
sysCpuIdle
sysMemFree
procCpuUser
procCpuSys
procMemVzs
procMemRss
pcapRecv
pcapDrop
msgId
msgValue
msg
interfaceName
interfaceDescripton
geoLatitude
geoLongitude
probeName
probeLocationName
sysMemTotal
queueFillLevel
bottleneck
freq
ORsignalBandwidth
ORsignalPower
ORmodulationType
ORsymbolRate
ORmodulationOrder
ORrolloffFactor
ORgeopositionLon
ORgeopositionLat
ORgeopositionElev
ORpolicyRecord
channel_status
sensing_value
sensing_threshold
OR_terminal_id
OR_terminal_id_list
Infrastructure_network_id
Infrastructure_network_type
Battery_lifetime_min
Battery_lifetime_h
Battery_status
Cell_id_number
Spectral_allocation_vector
Spectral_allocation_profile
Center_frequency
Bandwidth_of_CAP
ORmodulation
ORprofileRecord
APN
RuleName
IMSI
QCI
MaxDownload
MaxUpload
GuaranteedDownload
GuaranteedUpload
APNDownload
APNUpload
RuleFlag
RuleID

INRIA (PEN: 12559)

NameCommunityBasicStandardPremium
geospatialLocationCRSCode
geospatialLocationLat
geospatialLocationLng
geospatialLocationAlt
geospatialLocationRadius
civicLocationType
civicLocationValue
locationMethod
locationTime
deviceId

Plixer (PEN: 13745)

NameCommunityBasicStandardPremium
client_ip
client_hostname
partner_name
server_hostname
server_ip
recipient_address
event_id
msgid
priority
recipient_report_status
number_recipients
origination_time
encryption
service_version
linked_msgid
message_subject
sender_address
date_time
client_ip
server_ip
source_context
connector_id
source_component
related_recipient_address
reference
return_path
message_info
directionality
tenant_id
original_client_ip
original_server_ip
custom_data
internal_message_id

Sandvine, was Procera Networks/Netintact (PEN: 15397)

NameCommunityBasicStandardPremium
sandvineService
sandvineBaseService
sandvineIncomingOctets
sandvineOutgoingOctets
sandvineIncomingPackets
sandvineOutgoingPackets
sandvineIncomingShapingLatency
sandvineOutgoingShapingLatency
sandvineIncomingShapingDrops
sandvineOutgoingShapingDrops
sandvineInternalRtt
sandvineExternalRtt
sandvineFlowBehavior
sandvineContentCategories
sandvineProperty
sandvineServerHostname
sandvineHttpRequestMethod
sandvineHttpUserAgent
sandvineHttpContentType
sandvineHttpUrl
sandvineHttpReferer
sandvineHttpResponseStatus
sandvineHttpFileLength
sandvineHttpLocation
sandvineHttpLanguage
sandvineSubscriberId
sandvineMsisdn
sandvineImsi
sandvineRat
sandvineDeviceId
sandvineSgsn
sandvineRnc
sandvineApn
sandvineUserLocationInformation
sandvineGgsn
sandvineQoeIncomingInternal
sandvineQoeIncomingExternal
sandvineQoeOutgoingInternal
sandvineQoeOutgoingExternal
sandvineLocalIPv4Host
sandvineLocalIPv6Host
sandvineRemoteIPv4Host
sandvineRemoteIPv6Host
sandvineHttpRequestVersion
sandvineTemplateName
sandvineIncomingDscp
sandvineOutgoingDscp
sandvineIncomingDot1qVlanIdLevel1
sandvineIncomingDot1qVlanIdLevel2
sandvineIncomingDot1qVlanIdLevel3
sandvineIncomingDot1qVlanIdLevel4
sandvineOutgoingDot1qVlanIdLevel1
sandvineOutgoingDot1qVlanIdLevel2
sandvineOutgoingDot1qVlanIdLevel3
sandvineOutgoingDot1qVlanIdLevel4
sandvineIncomingDot1qPriorityLevel1
sandvineIncomingDot1qPriorityLevel2
sandvineIncomingDot1qPriorityLevel3
sandvineIncomingDot1qPriorityLevel4
sandvineOutgoingDot1qPriorityLevel1
sandvineOutgoingDot1qPriorityLevel2
sandvineOutgoingDot1qPriorityLevel3
sandvineOutgoingDot1qPriorityLevel4
sandvineInternalJitter
sandvineExternalJitter
sandvineServiceObject
sandvineRemoteGeoip

Masaryk University (PEN: 16982)

NameCommunityBasicStandardPremium
sourceGeo
destinationGeo
HTTPUserAgent
HTTPMethod
HTTPDomain
HTTPReferer
HTTPContentType
HTTPUrl
HTTPStatus
HTTPHeaderCount
appPID
appName
appUID
appMatchLevel
tunnelSrcIPv6
tunnelDstIPv6
tunnelSrcPort
tunnelDstPort
tunnelProtocol
tunnelType
tunnelTCPFlags
tunnelICMPcode
tunnelTeredoHeaders
tunnelTeredoTrailers
tunnelSourceGeo
tunnelDestinationGeo
tunnelOuterSourceGeo
tunnelOuterDestinationGeo
tunnelHOPLimit
HTTPRequestType
HTTPRequestHost
HTTPRequestURL
HTTPRequestAgentID
HTTPRequestAgent
HTTPRequestReferer
HTTPResponseCode
HTTPResponseType
HTTPResponseTime
TCP_RTT_US
TCP_SRT_US
TCP_CRT_US
JITTER_DEV_US
JITTER_AVG_US
JITTER_MIN_US
JITTER_MAX_US
DELAY_DEV_US
DELAY_AVG_US
DELAY_MIN_US
DELAY_MAX_US
SYN_SIZE
TCP_WIN_SIZE
tlsCliVer
tlsSerVer
tlsSerCips
tlsCliCips
tlsCertSubject
tlsCertIssuer
tlsCertNotBefore
tlsCerNotAfter
tlsPkeyLength
tlsPkeyExponent
tlsPkeyAlgorithm
tlsServerName

netfilter/iptables project (PEN: 21373)

NameCommunityBasicStandardPremium
mark
conntrack_id

Palo Alto Networks (PEN: 25461)

NameCommunityBasicStandardPremium
App-ID
User-ID

Gigamon Systems (PEN: 26866)

NameCommunityBasicStandardPremium
HTTP_URL
HTTP_RespCode
HTTP_UserAgent
CERT_IssuerCname
CERT_SubjectCname
CERT_Issuer
CERT_Subject
CERT_ValidFrom
CERT_ValidTo
CERT_SerialNo
CERT_SignatureAlgo
CERT_SubjectAlgo
CERT_SubjectKeySize
CERT_SubjectAltName
SERVER_SNI
SERVER_Version
SERVER_Cipher
SERVER_CompressionMethod
SERVER_SessionId
CERT_SignatureAlgoTxt
CERT_SubjectAlgoTxt
SERVER_CipherTxt
SERVER_VersionTxt
DNS_ID
DNS_OPCODE
DNS_RespCode
DNS_QueryName
DNS_RespName
DNS_RespTTL
DNS_RespIPv4
DNS_RespIPv6
DNS_Bits
DNS_QdCt
DNS_AnCt
DNS_NsCt
DNS_ArCt
DNS_QueryType
DNS_QueryClass
DNS_RespType
DNS_RespClass
DNS_RespRdlen
DNS_RespRdata
DNS_AuthName
DNS_AuthType
DNS_AuthClass
DNS_AuthTTL
DNS_AuthRdlen
DNS_AuthRdata
DNS_AddName
DNS_AddType
DNS_AddClass
DNS_AddTTL
DNS_AddRdlen
DNS_AddRdata
DNS_QueryTypeTxt
DNS_QueryClassTxt
DNS_RespTypeTxt
DNS_RespClassTxt
DNS_AuthTypeTxt
DNS_AuthClassTxt
DNS_AddTypeTxt
DNS_AddClassTxt
DnsResponseIpv4AddrText
RADIUS_CALLED_STATION_ID
RADIUS_CALLING_STATION_ID
RADIUS_LOGIN
HTTP_Version
HTTP_ReqMethod
HTTP_Host
RADIUS_NAT_ADDRESS
RADIUS_PORT_START
RADIUS_PORT_END

IPFIX Reverse Information Element Private Enterprise (PEN: 29305)

NameCommunityBasicStandardPremium
octetDeltaCount
packetDeltaCount
deltaFlowCount
protocolIdentifier
ipClassOfService
tcpControlBits
sourceTransportPort
sourceIPv4Address
sourceIPv4PrefixLength
ingressInterface
destinationTransportPort
destinationIPv4Address
destinationIPv4PrefixLength
egressInterface
ipNextHopIPv4Address
bgpSourceAsNumber
bgpDestinationAsNumber
bgpNextHopIPv4Address
postMCastPacketDeltaCount
postMCastOctetDeltaCount
flowEndSysUpTime
flowStartSysUpTime
postOctetDeltaCount
postPacketDeltaCount
minimumIpTotalLength
maximumIpTotalLength
sourceIPv6Address
destinationIPv6Address
sourceIPv6PrefixLength
destinationIPv6PrefixLength
flowLabelIPv6
icmpTypeCodeIPv4
igmpType
samplingInterval
samplingAlgorithm
flowActiveTimeout
flowIdleTimeout
engineType
engineId
ipv4RouterSc
sourceIPv4Prefix
destinationIPv4Prefix
mplsTopLabelType
mplsTopLabelIPv4Address
samplerId
samplerMode
samplerRandomInterval
classId
minimumTTL
maximumTTL
fragmentIdentification
postIpClassOfService
sourceMacAddress
postDestinationMacAddress
vlanId
postVlanId
ipVersion
flowDirection
ipNextHopIPv6Address
bgpNextHopIPv6Address
ipv6ExtensionHeaders
mplsTopLabelStackSection
mplsLabelStackSection2
mplsLabelStackSection3
mplsLabelStackSection4
mplsLabelStackSection5
mplsLabelStackSection6
mplsLabelStackSection7
mplsLabelStackSection8
mplsLabelStackSection9
mplsLabelStackSection10
destinationMacAddress
postSourceMacAddress
interfaceName
interfaceDescription
samplerName
octetTotalCount
packetTotalCount
flagsAndSamplerId
fragmentOffset
forwardingStatus
mplsVpnRouteDistinguisher
mplsTopLabelPrefixLength
srcTrafficIndex
dstTrafficIndex
applicationDescription
applicationId
applicationName
postIpDiffServCodePoint
multicastReplicationFactor
className
classificationEngineId
layer2packetSectionOffset
layer2packetSectionSize
layer2packetSectionData
bgpNextAdjacentAsNumber
bgpPrevAdjacentAsNumber
droppedOctetDeltaCount
droppedPacketDeltaCount
droppedOctetTotalCount
droppedPacketTotalCount
flowEndReason
observationPointId
icmpTypeCodeIPv6
mplsTopLabelIPv6Address
lineCardId
portId
meteringProcessId
exportingProcessId
wlanChannelId
wlanSSID
flowStartSeconds
flowEndSeconds
flowStartMilliseconds
flowEndMilliseconds
flowStartMicroseconds
flowEndMicroseconds
flowStartNanoseconds
flowEndNanoseconds
flowStartDeltaMicroseconds
flowEndDeltaMicroseconds
systemInitTimeMilliseconds
flowDurationMilliseconds
flowDurationMicroseconds
destinationIPv6Prefix
sourceIPv6Prefix
postOctetTotalCount
postPacketTotalCount
postMCastPacketTotalCount
postMCastOctetTotalCount
icmpTypeIPv4
icmpCodeIPv4
icmpTypeIPv6
icmpCodeIPv6
udpSourcePort
udpDestinationPort
tcpSourcePort
tcpDestinationPort
tcpSequenceNumber
tcpAcknowledgementNumber
tcpWindowSize
tcpUrgentPointer
tcpHeaderLength
ipHeaderLength
totalLengthIPv4
payloadLengthIPv6
ipTTL
nextHeaderIPv6
mplsPayloadLength
ipDiffServCodePoint
ipPrecedence
fragmentFlags
octetDeltaSumOfSquares
octetTotalSumOfSquares
mplsTopLabelTTL
mplsLabelStackLength
mplsLabelStackDepth
mplsTopLabelExp
ipPayloadLength
udpMessageLength
isMulticast
ipv4IHL
ipv4Options
tcpOptions
tcpSynTotalCount
tcpFinTotalCount
tcpRstTotalCount
tcpPshTotalCount
tcpAckTotalCount
tcpUrgTotalCount
ipTotalLength
postNATSourceIPv4Address
postNATDestinationIPv4Address
postNAPTSourceTransportPort
postNAPTDestinationTransportPort
natOriginatingAddressRealm
natEvent
initiatorOctets
responderOctets
firewallEvent
ingressVRFID
egressVRFID
VRFname
postMplsTopLabelExp
tcpWindowScale
ethernetHeaderLength
ethernetPayloadLength
ethernetTotalLength
dot1qVlanId
dot1qPriority
dot1qCustomerVlanId
dot1qCustomerPriority
metroEvcId
metroEvcType
pseudoWireId
pseudoWireType
pseudoWireControlWord
ingressPhysicalInterface
egressPhysicalInterface
postDot1qVlanId
postDot1qCustomerVlanId
ethernetType
postIpPrecedence
collectionTimeMilliseconds
exportSctpStreamId
maxExportSeconds
maxFlowEndSeconds
messageMD5Checksum
messageScope
minExportSeconds
minFlowStartSeconds
opaqueOctets
sessionScope
maxFlowEndMicroseconds
maxFlowEndMilliseconds
maxFlowEndNanoseconds
minFlowStartMicroseconds
minFlowStartMilliseconds
minFlowStartNanoseconds
collectorCertificate
exporterCertificate
dataRecordsReliability
observationPointType
newConnectionDeltaCount
connectionSumDurationSeconds
connectionTransactionId
postNATSourceIPv6Address
postNATDestinationIPv6Address
natPoolId
natPoolName
anonymizationFlags
anonymizationTechnique
informationElementIndex
p2pTechnology
tunnelTechnology
encryptedTechnology
basicList
subTemplateList
subTemplateMultiList
bgpValidityState
IPSecSPI
greKey
natType
initiatorPackets
responderPackets
observationDomainName
selectionSequenceId
selectorId
informationElementId
selectorAlgorithm
samplingPacketInterval
samplingPacketSpace
samplingTimeInterval
samplingTimeSpace
samplingSize
samplingPopulation
samplingProbability
dataLinkFrameSize
ipHeaderPacketSection
ipPayloadPacketSection
dataLinkFrameSection
mplsLabelStackSection
mplsPayloadPacketSection
selectorIdTotalPktsObserved
selectorIdTotalPktsSelected
absoluteError
relativeError
observationTimeSeconds
observationTimeMilliseconds
observationTimeMicroseconds
observationTimeNanoseconds
digestHashValue
hashIPPayloadOffset
hashIPPayloadSize
hashOutputRangeMin
hashOutputRangeMax
hashSelectedRangeMin
hashSelectedRangeMax
hashDigestOutput
hashInitialiserValue
selectorName
upperCILimit
lowerCILimit
confidenceLevel
informationElementDataType
informationElementDescription
informationElementName
informationElementRangeBegin
informationElementRangeEnd
informationElementSemantics
informationElementUnits
privateEnterpriseNumber
virtualStationInterfaceId
virtualStationInterfaceName
virtualStationUUID
virtualStationName
layer2SegmentId
layer2OctetDeltaCount
layer2OctetTotalCount
ingressUnicastPacketTotalCount
ingressMulticastPacketTotalCount
ingressBroadcastPacketTotalCount
egressUnicastPacketTotalCount
egressBroadcastPacketTotalCount
monitoringIntervalStartMilliSeconds
monitoringIntervalEndMilliSeconds
portRangeStart
portRangeEnd
portRangeStepSize
portRangeNumPorts
staMacAddress
staIPv4Address
wtpMacAddress
ingressInterfaceType
egressInterfaceType
rtpSequenceNumber
userName
applicationCategoryName
applicationSubCategoryName
applicationGroupName
originalFlowsPresent
originalFlowsInitiated
originalFlowsCompleted
distinctCountOfSourceIPAddress
distinctCountOfDestinationIPAddress
distinctCountOfSourceIPv4Address
distinctCountOfDestinationIPv4Address
distinctCountOfSourceIPv6Address
distinctCountOfDestinationIPv6Address
valueDistributionMethod
rfc3550JitterMilliseconds
rfc3550JitterMicroseconds
rfc3550JitterNanoseconds
dot1qDEI
dot1qCustomerDEI
flowSelectorAlgorithm
flowSelectedOctetDeltaCount
flowSelectedPacketDeltaCount
flowSelectedFlowDeltaCount
selectorIDTotalFlowsObserved
selectorIDTotalFlowsSelected
samplingFlowInterval
samplingFlowSpacing
flowSamplingTimeInterval
flowSamplingTimeSpacing
hashFlowDomain
transportOctetDeltaCount
transportPacketDeltaCount
originalExporterIPv4Address
originalExporterIPv6Address
originalObservationDomainId
intermediateProcessId
ignoredDataRecordTotalCount
dataLinkFrameType
sectionOffset
sectionExportedOctets
dot1qServiceInstanceTag
dot1qServiceInstanceId
dot1qServiceInstancePriority
dot1qCustomerSourceMacAddress
dot1qCustomerDestinationMacAddress
postLayer2OctetDeltaCount
postMCastLayer2OctetDeltaCount
layer2OctetTotalCount
postLayer2OctetTotalCount
postMCastLayer2OctetTotalCount
minimumLayer2TotalLength
maximumLayer2TotalLength
droppedLayer2OctetDeltaCount
droppedLayer2OctetTotalCount
ignoredLayer2OctetTotalCount
notSentLayer2OctetTotalCount
layer2OctetDeltaSumOfSquares
layer2OctetTotalSumOfSquares
layer2FrameDeltaCount
layer2FrameTotalCount
pseudoWireDestinationIPv4Address
ignoredLayer2FrameTotalCount
mobileIMSI
mobileMSISDN
httpStatusCode
sourceTransportPortsLimit
httpRequestMethod
httpRequestHost
httpRequestTarget
httpMessageVersion
natInstanceID
internalAddressRealm
externalAddressRealm
natQuotaExceededEvent
natThresholdEvent
httpUserAgent
httpContentType
httpReasonPhrase
maxSessionEntries
maxBIBEntries
maxEntriesPerUser
maxSubscribers
maxFragmentsPendingReassembly
addressPoolHighThreshold
addressPoolLowThreshold
addressPortMappingHighThreshold
addressPortMappingLowThreshold
addressPortMappingPerUserHighThreshold
globalAddressMappingHighThreshold
vpnIdentifier
bgpCommunity
bgpExtendedCommunity
bgpLargeCommunity

Cubro (PEN: 32182)

NameCommunityBasicStandardPremium
appID

CACE Technologies (PEN: 32622)

NameCommunityBasicStandardPremium
caceLocalIPv4Address
caceRemoteIPv4Address
caceLocalIPv6Address
caceRemoteIPv6Address
caceLocalTransportPort
caceRemoteTransportPort
caceLocalIPv4id
caceLocalICMPid
caceLocalProcessUserId
caceLocalProcessId
caceLocalProcessUserName
caceLocalProcessCommand

FastIP/Boundary (PEN: 33610)

NameCommunityBasicStandardPremium
METER_VERSION
METER_OS_SYSNAME
METER_OS_NODENAME
METER_OS_RELEASE
METER_OS_VERSION
METER_OS_MACHINE
TCP_FLAGS
EPOCH_SECOND
NIC_NAME
NIC_ID
NIC_MAC
NIC_IP
COLLISIONS
ERRORS
NIC_DRIVER_NAME
NIC_DRIVER_VERSION
NIC_FIRMWARE_VERSION
METER_OS_DISTRIBUTION_NAME
BOND_INTERFACE_MODE
BOND_INTERFACE_PHYSICAL_NIC_COUNT
BOND_INTERFACE_ID
TCP_HANDSHAKE_RTT_USEC
APP_RTT_USEC

trammell.ch (PEN: 35566)

NameCommunityBasicStandardPremium
sipUsername
sipMethod
sipRequestURI
sipFromURI
sipFromTag
sipToURI
sipToTag
sipCallId
sipSequenceNumber
sipContactURI
sipPaiURI
sipResponseStatus
sipServerTransaction
sipClientTransaction
sipSessionIdCode
sipRouteURI
sipPaiURI
sipPpiURI
sipObservationType
sipPCalledPartyURI
sipVia
sipAuthUsername
sipSubscriptionEvent
sipSubscriptionState
sipExpires
sipPVisitedNetworkID
sipPAccessNetworkInfo
sipPChargingFunctionAddr
sipPChargingVector
sipPAssocURI

ntop (PEN: 35632)

NameCommunityBasicStandardPremium
CLIENT_TCP_FLAGS
SERVER_TCP_FLAGS
SRC_FRAGMENTS
DST_FRAGMENTS
SRC_TO_DST_MAX_THROUGHPUT
SRC_TO_DST_MIN_THROUGHPUT
SRC_TO_DST_AVG_THROUGHPUT
DST_TO_SRC_MAX_THROUGHPUT
DST_TO_SRC_MIN_THROUGHPUT
DST_TO_SRC_AVG_THROUGHPUT
NUM_PKTS_UP_TO_128_BYTES
NUM_PKTS_128_TO_256_BYTES
NUM_PKTS_256_TO_512_BYTES
NUM_PKTS_512_TO_1024_BYTES
NUM_PKTS_1024_TO_1514_BYTES
NUM_PKTS_OVER_1514_BYTES
CUMULATIVE_ICMP_TYPE
SRC_IP_COUNTRY
SRC_IP_CITY
DST_IP_COUNTRY
DST_IP_CITY
FLOW_PROTO_PORT
UPSTREAM_TUNNEL_ID
LONGEST_FLOW_PKT
SHORTEST_FLOW_PKT
RETRANSMITTED_IN_PKTS
RETRANSMITTED_OUT_PKTS
OOORDER_IN_PKTS
OOORDER_OUT_PKTS
UNTUNNELED_PROTOCOL
UNTUNNELED_IPV4_SRC_ADDR
UNTUNNELED_L4_SRC_PORT
UNTUNNELED_IPV4_DST_ADDR
UNTUNNELED_L4_DST_PORT
L7_PROTO
L7_PROTO_NAME
DOWNSTREAM_TUNNEL_ID
FLOW_USER_NAME
FLOW_SERVER_NAME
CLIENT_NW_LATENCY_MS
SERVER_NW_LATENCY_MS
APPL_LATENCY_MS
PLUGIN_NAME
RETRANSMITTED_IN_BYTES
RETRANSMITTED_OUT_BYTES
SIP_CALL_ID
SIP_CALLING_PARTY
SIP_CALLED_PARTY
SIP_RTP_CODECS
SIP_INVITE_TIME
SIP_TRYING_TIME
SIP_RINGING_TIME
SIP_INVITE_OK_TIME
SIP_INVITE_FAILURE_TIME
SIP_BYE_TIME
SIP_BYE_OK_TIME
SIP_CANCEL_TIME
SIP_CANCEL_OK_TIME
SIP_RTP_IPV4_SRC_ADDR
SIP_RTP_L4_SRC_PORT
SIP_RTP_IPV4_DST_ADDR
SIP_RTP_L4_DST_PORT
SIP_RESPONSE_CODE
SIP_REASON_CAUSE
RTP_FIRST_SEQ
RTP_FIRST_TS
RTP_LAST_SEQ
RTP_LAST_TS
RTP_IN_JITTER
RTP_OUT_JITTER
RTP_IN_PKT_LOST
RTP_OUT_PKT_LOST
RTP_OUT_PAYLOAD_TYPE
RTP_IN_MAX_DELTA
RTP_OUT_MAX_DELTA
RTP_IN_PAYLOAD_TYPE
L7_PROTO
SRC_PROC_PID
SRC_PROC_NAME
HTTP_URL
HTTP_RET_CODE
HTTP_REFERER
HTTP_UA
HTTP_MIME
SMTP_MAIL_FROM
SMTP_RCPT_TO
HTTP_HOST
SSL_SERVER_NAME
BITTORRENT_HASH
MYSQL_SERVER_VERSION
MYSQL_USERNAME
MYSQL_DB
MYSQL_QUERY
MYSQL_RESPONSE
ORACLE_USERNAME
ORACLE_QUERY
ORACLE_RSP_CODE
ORACLE_RSP_STRING
ORACLE_QUERY_DURATION
DNS_QUERY
DNS_QUERY_ID
DNS_QUERY_TYPE
DNS_RET_CODE
DNS_NUM_ANSWERS
POP_USER
GTPV1_REQ_MSG_TYPE
GTPV1_RSP_MSG_TYPE
GTPV1_C2S_TEID_DATA
GTPV1_C2S_TEID_CTRL
GTPV1_S2C_TEID_DATA
GTPV1_S2C_TEID_CTRL
GTPV1_END_USER_IP
GTPV1_END_USER_IMSI
GTPV1_END_USER_MSISDN
GTPV1_END_USER_IMEI
GTPV1_APN_NAME
GTPV1_RAI_MCC
GTPV1_RAI_MNC
GTPV1_ULI_CELL_LAC
GTPV1_ULI_CELL_CI
GTPV1_ULI_SAC
GTPV1_RAT_TYPE
RADIUS_REQ_MSG_TYPE
RADIUS_RSP_MSG_TYPE
RADIUS_USER_NAME
RADIUS_CALLING_STATION_ID
RADIUS_CALLED_STATION_ID
RADIUS_NAS_IP_ADDR
RADIUS_NAS_IDENTIFIER
RADIUS_USER_IMSI
RADIUS_USER_IMEI
RADIUS_FRAMED_IP_ADDR
RADIUS_ACCT_SESSION_ID
RADIUS_ACCT_STATUS_TYPE
RADIUS_ACCT_IN_OCTETS
RADIUS_ACCT_OUT_OCTETS
RADIUS_ACCT_IN_PKTS
RADIUS_ACCT_OUT_PKTS
IMAP_LOGIN
DIAMETER_FRAMED_IP_ADDR
DIAMETER_SERVED_IP_ADDR
DIAMETER_CALLING_STATION_ID
DIAMETER_CALLED_STATION_ID
DIAMETER_SUBSCRIPTION_ID
DIAMETER_CALLING_PARTY_ADDRESS
DIAMETER_CALLED_PARTY_ADDRESS
DIAMETER_PDP_ADDR
GTPV2_REQ_MSG_TYPE
GTPV2_RSP_MSG_TYPE
GTPV2_C2S_S1U_GTPU_TEID
GTPV2_C2S_S1U_GTPU_IP
GTPV2_S2C_S1U_GTPU_TEID
GTPV2_S2C_S1U_GTPU_IP
GTPV2_END_USER_IMSI
GTPV2_END_USER_MSISDN
GTPV2_APN_NAME
GTPV2_ULI_MCC
GTPV2_ULI_MNC
GTPV2_ULI_CELL_TAC
GTPV2_ULI_CELL_ID
GTPV2_RAT_TYPE
GTPV2_PDN_IP
GTPV2_END_USER_IMEI
SRC_AS_PATH_1
SRC_AS_PATH_2
SRC_AS_PATH_3
SRC_AS_PATH_4
SRC_AS_PATH_5
SRC_AS_PATH_6
SRC_AS_PATH_7
SRC_AS_PATH_8
SRC_AS_PATH_9
SRC_AS_PATH_10
DST_AS_PATH_1
DST_AS_PATH_2
DST_AS_PATH_3
DST_AS_PATH_4
DST_AS_PATH_5
DST_AS_PATH_6
DST_AS_PATH_7
DST_AS_PATH_8
DST_AS_PATH_9
DST_AS_PATH_10
SIP_UAC
SIP_UAS
MYSQL_APPL_LATENCY_USEC
GTPV0_REQ_MSG_TYPE
GTPV0_RSP_MSG_TYPE
GTPV0_TID
GTPV0_END_USER_IP
GTPV0_END_USER_MSISDN
GTPV0_APN_NAME
GTPV0_RAI_MCC
GTPV0_RAI_MNC
GTPV0_RAI_CELL_LAC
GTPV0_RAI_CELL_RAC
GTPV0_RESPONSE_CAUSE
GTPV1_RESPONSE_CAUSE
GTPV2_RESPONSE_CAUSE
NUM_PKTS_TTL_5_32
NUM_PKTS_TTL_64_96
NUM_PKTS_TTL_64_96
NUM_PKTS_TTL_96_128
NUM_PKTS_TTL_128_160
NUM_PKTS_TTL_160_192
NUM_PKTS_TTL_192_224
NUM_PKTS_TTL_224_255
GTPV1_RAI_LAC
GTPV1_RAI_RAC
GTPV1_ULI_MCC
GTPV1_ULI_MNC
NUM_PKTS_TTL_2_5
NUM_PKTS_TTL_EQ_1
RTP_SIP_CALL_ID
IN_SRC_OSI_SAP
OUT_DST_OSI_SAP
WHOIS_DAS_DOMAIN
DNS_TTL_ANSWER
DHCP_CLIENT_MAC
DHCP_CLIENT_IP
DHCP_CLIENT_NAME
FTP_LOGIN
FTP_PASSWORD
FTP_COMMAND
FTP_COMMAND_RET_CODE
HTTP_METHOD
HTTP_SITE
SIP_C_IP
SIP_CALL_STATE
EPP_REGISTRAR_NAME
EPP_CMD
EPP_CMD_ARGS
EPP_RSP_CODE
EPP_REASON_STR
EPP_SERVER_NAME
RTP_IN_MOS
RTP_IN_R_FACTOR
SRC_PROC_USER_NAME
SRC_FATHER_PROC_PID
SRC_FATHER_PROC_NAME
DST_PROC_PID
DST_PROC_NAME
DST_PROC_USER_NAME
DST_FATHER_PROC_PID
DST_FATHER_PROC_NAME
RTP_RTT
RTP_IN_TRANSIT
RTP_OUT_TRANSIT
SRC_PROC_ACTUAL_MEMORY
SRC_PROC_PEAK_MEMORY
SRC_PROC_AVERAGE_CPU_LOAD
SRC_PROC_NUM_PAGE_FAULTS
DST_PROC_ACTUAL_MEMORY
DST_PROC_PEAK_MEMORY
DST_PROC_AVERAGE_CPU_LOAD
DST_PROC_NUM_PAGE_FAULTS
DURATION_IN
DURATION_OUT
SRC_PROC_PCTG_IOWAIT
DST_PROC_PCTG_IOWAIT
RTP_DTMF_TONES
UNTUNNELED_IPV6_SRC_ADDR
UNTUNNELED_IPV6_DST_ADDR
DNS_RESPONSE
DIAMETER_REQ_MSG_TYPE
DIAMETER_RSP_MSG_TYPE
DIAMETER_REQ_ORIGIN_HOST
DIAMETER_RSP_ORIGIN_HOST
DIAMETER_REQ_USER_NAME
DIAMETER_RSP_RESULT_CODE
DIAMETER_EXP_RES_VENDOR_ID
DIAMETER_EXP_RES_RESULT_CODE
S1AP_ENB_UE_S1AP_ID
S1AP_MME_UE_S1AP_ID
S1AP_MSG_EMM_TYPE_MME_TO_ENB
S1AP_MSG_ESM_TYPE_MME_TO_ENB
S1AP_MSG_EMM_TYPE_ENB_TO_MME
S1AP_MSG_ESM_TYPE_ENB_TO_MME
S1AP_CAUSE_ENB_TO_MME
S1AP_DETAILED_CAUSE_ENB_TO_MME
TCP_WIN_MIN_IN
TCP_WIN_MAX_IN
TCP_WIN_MSS_IN
TCP_WIN_SCALE_IN
TCP_WIN_MIN_OUT
TCP_WIN_MAX_OUT
TCP_WIN_MSS_OUT
TCP_WIN_SCALE_OUT
DHCP_REMOTE_ID
DHCP_SUBSCRIBER_ID
SRC_PROC_UID
DST_PROC_UID
APPLICATION_NAME
USER_NAME
DHCP_MESSAGE_TYPE
RTP_IN_PKT_DROP
RTP_OUT_PKT_DROP
RTP_OUT_MOS
RTP_OUT_R_FACTOR
RTP_MOS
GTPV2_S5_S8_GTPC_TEID
RTP_R_FACTOR
RTP_SSRC
PAYLOAD_HASH
GTPV2_C2S_S5_S8_GTPU_TEID
GTPV2_S2C_S5_S8_GTPU_TEID
GTPV2_C2S_S5_S8_GTPU_IP
GTPV2_S2C_S5_S8_GTPU_IP
SRC_AS_MAP
DST_AS_MAP
DIAMETER_HOP_BY_HOP_ID
UPSTREAM_SESSION_ID
DOWNSTREAM_SESSION_ID
SRC_IP_LONG
SRC_IP_LAT
DST_IP_LONG
DST_IP_LAT
DIAMETER_CLR_CANCEL_TYPE
DIAMETER_CLR_FLAGS
GTPV2_C2S_S5_S8_GTPC_IP
GTPV2_S2C_S5_S8_GTPC_IP
GTPV2_C2S_S5_S8_SGW_GTPU_TEID
GTPV2_S2C_S5_S8_SGW_GTPU_TEID
GTPV2_C2S_S5_S8_SGW_GTPU_IP
GTPV2_S2C_S5_S8_SGW_GTPU_IP
HTTP_X_FORWARDED_FOR
HTTP_VIA
SSDP_HOST
SSDP_USN
NETBIOS_QUERY_NAME
NETBIOS_QUERY_TYPE
NETBIOS_RESPONSE
NETBIOS_QUERY_OS
SSDP_SERVER
SSDP_TYPE
SSDP_METHOD
NPROBE_IPV4_ADDRESS
SRC_TO_DST_SECOND_BYTES
DST_TO_SRC_SECOND_BYTES
DICOM_IMPL_UID
DICOM_IMPL_VERSION
DICOM_MODALITY
DICOM_MANUFACTURER
DICOM_INST_NAME
DICOM_INST_ADDR
DICOM_STATION_NAME
DICOM_DEVICE_SERIAL
DICOM_SW_VERSION
JA3C_HASH
JA3S_HASH
SRC_HOST_NAME
DST_HOST_NAME
SSL_CIPHER
SSL_UNSAFE_CIPHER
SSL_VERSION
HASSH_CLIENT
HASSH_SERVER
L7_PROTO_CATEGORY
SEQ_PLEN
ENTROPY_CLIENT_BYTES
ENTROPY_SERVER_BYTES
SEQ_TDIFF
SEQ_PLEN_HASH
SEQ_TDIFF_HASH
PKT_VECTOR
PROTOCOL_MAP
L4_SRC_PORT_MAP
L4_DST_PORT_MAP
L4_SRV_PORT
L4_SRV_PORT_MAP

INVEA-TECH/FlowMon Networks (PEN: 39499)

NameCommunityBasicStandardPremium
HTTPRequestHost
HTTPRequestURL
HTTPRequestReferer
HTTPRequestType
HTTPResponseType
HTTPResponseCode
HTTPRequestAgent
HTTPRequestAgentID
httpUaOs
httpUaOsMaj
httpUaOsMin
httpUaOsBld
httpUaApp
httpUaAppMaj
httpUaAppMin
httpUaAppBld
voipPacketType
sipCallId
sipCallingParty
sipCalledParty
sipVia
sipInviteRingingTime
sipOkTime
sipByeTime
sipRtpIp4
sipRtpIp6
sipRtpAudio
sipRtpVideo
sipStats
rtpCodec
rtpJitter
rtcpLost
rtcpPackets
rtcpOctets
rtcpSourceCount
sipUserAgent
sipRequestUri
sipCSeq
NPMJitterDev
NPMJitterAvg
NPMJitterMin
NPMJitterMax
NPMDelayDev
NPMDelayAvg
NPMDelayMin
NPMDelayMax
NPMRoundTripTime
NPMServerResponseTime
NPMTCPRetransmission
NPMTCPOutOfOrder
tcpSynSize
tcpSynTtl
dnsId
dnsFlagsCodes
dnsQuestionCount
dnsAnswrecCount
dnsAuthrecCount
dnsAddtrecCount
dnsCrrName
dnsCrrType
dnsCrrClass
dnsCrrTtl
dnsCrrRdata
dnsQname
dnsQtype
dnsQclass
dnsCrrRdataLen
smbCmd
smbTree
smbFile
smbFileType
smbOp
arpHrd
arpOp
dhcpOfferedIp
dhcpHostMacAddr
dhcpType
dhcpIpLeaseTime
dhcpServerIp
dhcpDomainName
dhcpHostName
dhcpIpRequest
tdsRequestType
tdsVersion
tdsClientVersion
tdsServerVersion
tdsDatabase
tdsUsername
tdsHostname
tdsResponseType
tdsToken
tdsTmrType
tdsErrorCode
tdsEnchangeType
tdsSqlQuery
tdsRpcName
tdsServerName
INGRESS_ACL_ID
EGRESS_ACL_ID
FW_EXT_EVENT
smtpEhloHelo
smtpMailFrom
mailUsername
mailFailedAuthenticationCount
mailIsEncrypted
mysqlProtocolVersion
mysqlServerVersion
mysqlUserAuthenticated
mysqlUsername
mysqlAuthMethodName
mysqlDatabase
mysqlCapabilitiesServer
mysqlCapabilitiesClient
mysqlErrorCode
mysqlCommand
mysqlQuery
pgsqlProtocolVersion
pgsqlServerVersion
pgsqlAuthMethod
pgsqlUsername
pgsqlDatabase
pgsqlErrorSqlstate
pgsqlErrorSeverity
pgsqlSqlQuery
pgsqlMsgTypeClient
pgsqlMsgTypeServer
tlsContentType
tlsHandshakeType
tlsSetupTime
tlsServerVersion
tlsServerRandom
tlsServerSessionId
tlsCipherSuite
tlsAlpn
tlsSni
tlsSniLength
tlsClientVersion
tlsCipherSuites
tlsClientRandom
tlsClientSessionId
tlsExtensionTypes
tlsExtensionLengths
tlsEllipticCurves
tlsEcPointFormats
tlsClientKeyLength
tlsIssuerCn
tlsSubjectCn
tlsSubjectOn
tlsValidityNotBefore
tlsValidityNotAfter
tlsSignatureAlg
tlsPublicKeyAlg
tlsPublicKeyLength
tlsJa3Fingerprint
iec104PktLength
iec104FrameFmt
iec104AsduType
iec104AsduObjCount
iec104AsduCot
iec104AsduOrg
iec104AsduAddress
coapVersion
coapMid
coapCode
coapOptionsCount
coapType
coapAccept
coapContentFormat
coapTokenLength
coapToken
coapUriHost
coapUriPath
coapUriQuery
gooseCocbRef
gooseGocbRef
gooseDataset
gooseGoID
gooseStNum
mms_type
mms_conf_service_req
mms_conf_service_resp
mms_unconf_service
dlms_type
dlms_subtype
dlms_class_id
dlms_obis
dlms_attr_method_id
dlms_data_type
dlms_data_length
dlms_data_access_result
dlms_action_result
vxlanVNI
username
xlateSourceAddressIPV4
xlateDestinationAddressIPV4
xlateSourcePort
xlateDestinationPort

A10 Networks (PEN: 40842)

NameCommunityBasicStandardPremium
fwdTupleType
revTupleType
fwdVNPID
revVNPID
mobileIMEI
Custom1
Custom2
Custom3
RuleName
RuleSetName
SourceZone
DestZone
fwDenyReset
flowDurationMilliseconds64
cgn-flow-direction

vIPtela, now Cisco (PEN: 41916)

NameCommunityBasicStandardPremium
VPN_Identifier
App_Identifier

Versa Networks (PEN: 42359)

NameCommunityBasicStandardPremium
appId
tenentId
eventType
applianceId

pmacct (PEN: 43874)

NameCommunityBasicStandardPremium
tag1
tag2
tag3
tag4

Allegro Packets (44237)

NameCommunityBasicStandardPremium
allegroMessageType
allegroUpdateIntervalMilliseconds

Ziften Technologies (PEN: 44619)

NameCommunityBasicStandardPremium
ZInbound
ZPid
ZParentPid
ZImagePath
ZBaseFilename
ZPlatform
ZAgentGUID
ZHostname
ZFileSignature
ZFileSigAlgo
ZFileSigAlgoChar
ZUserSID
ZParentImagePath
ZParentFileSignature
ZAccountId
ZModTimeSeconds
ZCommandName
ZCommandName

RedSocks (PEN: 44913)

NameCommunityBasicStandardPremium
orig_src_port
orig_src_ip
orig_dst_port
orig_dst_ip
orig_src_ip
orig_dst_ip
http_req_host
http_req_url
http_req_user_agent

Velocloud Networks, now VMware (PEN: 45346)

NameCommunityBasicStandardPremium
interfaceType
destinationUUID
vcPriority
vcRouteType
vcLinkPolicy
vcTrafficType
vcFlowPath
linkUUID
replicatedPacketsRxDeltaCount
replicatedPacketsTxDeltaCount
lostPacketsRxDeltaCount
retransmittedPacketsTxDeltaCount
primaryIpv4Address
jitterTxMs
avgLatencyTxMs
jitterRxMs
avgLatencyRxMs
linkName
packetsLostDeltaTxCount
bizPolicyId
firewallId
nextHopUUID
txLossPercent
rxLossPercent

Cognitix (PEN: 45480)

NameCommunityBasicStandardPremium
cognitixDpiProtocol
cognitixDpiApplication
cognitixDpiSrcOS
cognitixDpiClassification
cognitixDpiInSslClassification
cognitixCountrySource
cognitixCountryDestination
cognitixPolicyRuleId
cognitixIPSRuleId
cognitixPolicyRuleName
cognitixPolicyRuleAction
cognitixPolicyId
cognitixPolicyName
cognitixLogSeverity
cognitixUrl
cognitixUrlCategory
cognitixUrlReputation
cognitixFileTransferFilename
cognitixIocFeedId
cognitixIocFeedName
cognitixIocValueType
cognitixIocValue
cognitixSrcLocation
cognitixDstLocation
cognitixSrcAssetId
cognitixDstAssetId
cognitixUserId

Juniper Networks, was 128 Technology (PEN: 45956)

NameCommunityBasicStandardPremium
Record Type
Session Type
Start Time
End Time
Total Byte Count
Total Packet Count
TCP Retransmissions
Service Name
Service Class
Session ID
Service Group
Tenant
Router Name

Pluribus Networks (PEN: 47269)

NameCommunityBasicStandardPremium
LatencyMicroseconds

Niagara Networks (PEN: 47729)

NameCommunityBasicStandardPremium
SslServerNameIndication
SslServerVersion
SslServerVersionText
SslServerCipher
SslServerCipherText
SslConnectionEncryptionType
SslServerCompressionMethod
SslServerSessionId
SslCertificateIssuer
SslCertificateIssuerName
SslCertificateSubject
SslCertificateSubjectName
SslCertificateValidNotBefore
SslCertificateValidNotAfter
SslCertificateSerialNumber
SslCertificateSignatureAlgorithm
SslCertificateSignatureAlgorithmText
SslCertificateSubjectPublicKeySize
SslCertificateSubjectPublicAlgorithm
SslCertificateSubjectPublicAlgorithmText
SslCertificateSubjectAlgorithmText
SslCertificateSubjectAlternativeName
SslCertificateSha1
DnsIdentifier
DnsOpCode
DnsResponseCode
DnsQueryName
DnsResponseName
DnsResponseTTL
DnsResponseIPv4Addr
DnsResponseIPv4AddrText
DnsResponseIPv6Addr
DnsResponseIPv6AddrText
DnsBits
DnsQDCount
DnsANCount
DnsNSCount
DnsARCount
DnsQueryType
DnsQueryTypeText
DnsQueryClass
DnsQueryClassText
DnsResponseType
DnsResponseTypeText
DnsResponseClass
DnsResponseClassText
DnsResponseRDLength
DnsResponseRData
DnsAuthorityName
DnsAuthorityType
DnsAuthorityTypeText
DnsAuthorityClass
DnsAuthorityClassText
DnsAuthorityTTL
DnsAuthorityRDLength
DnsAuthorityRData
DnsAdditionalName
DnsAdditionalType
DnsAdditionalTypeText
DnsAdditionalClass
DnsAdditionalClassText
DnsAdditionalTTL
DnsAdditionalRDLength
DnsAdditionalRData
RadiusPacketTypeCode
RadiusPacketTypeCodeText
RadiusPacketIdentifier
RadiusAuthenticator
RadiusUserName
RadiusCallingStationId
RadiusCalledStationId
RadiusNasIpAddress
RadiusNasIpv6Address
RadiusNasIdentifier
RadiusFramedIpAddress
RadiusFramedIpv6Address
RadiusAcctSessionId
RadiusAcctStatusType
RadiusAcctInOctets
RadiusAcctOutOctets
RadiusAcctInPackets
RadiusAcctOutPackets
RadiusVsaVendorId
RadiusVsaName
RadiusVsaId
RadiusVsaValue

AMD/Pensando Systems (PEN: 51886)

NameCommunityBasicStandardPremium
vpcUUID
subnetUUID
flowLastMilliSeconds
tcpRetransmitCount
flow-state-index
role
tcp-state
tcp-win-mss
tcp-exceptions
tcp-rtt
egress-interface-type
egress-logical-interface
pen1

Project Antrea/VMware (PEN: 56506)

NameCommunityBasicStandardPremium
sourcePodNamespace
sourcePodName
destinationPodNamespace
destinationPodName
sourceNodeName
destinationNodeName
destinationClusterIPv4
destinationClusterIPv6
destinationServicePort
destinationServicePortName
ingressNetworkPolicyName
ingressNetworkPolicyNamespace
egressNetworkPolicyName
egressNetworkPolicyNamespace
ingressNetworkPolicyUID
ingressNetworkPolicyType
ingressNetworkPolicyRulePriority
egressNetworkPolicyUID
egressNetworkPolicyType
egressNetworkPolicyRulePriority
packetTotalCountFromSourceNode
octetTotalCountFromSourceNode
packetDeltaCountFromSourceNode
octetDeltaCountFromSourceNode
reversePacketTotalCountFromSourceNode
reverseOctetTotalCountFromSourceNode
reversePacketDeltaCountFromSourceNode
reverseOctetDeltaCountFromSourceNode
packetTotalCountFromDestinationNode
octetTotalCountFromDestinationNode
packetDeltaCountFromDestinationNode
octetDeltaCountFromDestinationNode
reversePacketTotalCountFromDestinationNode
reverseOctetTotalCountFromDestinationNode
reversePacketDeltaCountFromDestinationNode
reverseOctetDeltaCountFromDestinationNode
throughput
reverseThroughput
throughputFromSourceNode
throughputFromDestinationNode
reverseThroughputFromSourceNode
reverseThroughputFromDestinationNode
flowEndSecondsFromSourceNode
flowEndSecondsFromDestinationNode
egressName
egressIP
appProtocolName
httpVals