# Netflow IEs NetObserv Flow supports Netflow versions 1, 5, 6, 7 and 9 records. ### Netflow v1 NetObserv Flow supports 14 unique Netflow v1 information elements (IE). | Name | Community | Basic | Standard | Premium | | ---------- | :-------: | :---: | :------: | :-----: | | dOctets | ✓ | ✓ | ✓ | ✓ | | dPkts | ✓ | ✓ | ✓ | ✓ | | dstaddr | ✓ | ✓ | ✓ | ✓ | | dstport | ✓ | ✓ | ✓ | ✓ | | First | ✓ | ✓ | ✓ | ✓ | | input | ✓ | ✓ | ✓ | ✓ | | Last | ✓ | ✓ | ✓ | ✓ | | nexthop | ✓ | ✓ | ✓ | ✓ | | output | ✓ | ✓ | ✓ | ✓ | | prot | ✓ | ✓ | ✓ | ✓ | | srcaddr | ✓ | ✓ | ✓ | ✓ | | srcport | ✓ | ✓ | ✓ | ✓ | | tcp\_flags | ✓ | ✓ | ✓ | ✓ | | tos | ✓ | ✓ | ✓ | ✓ | ### Netflow v5 NetObserv Flow support 18 unique Netflow v5 information elements (IE). | Name | Community | Basic | Standard | Premium | | ---------- | :-------: | :---: | :------: | :-----: | | dOctets | ✓ | ✓ | ✓ | ✓ | | dPkts | ✓ | ✓ | ✓ | ✓ | | dst\_as | ✓ | ✓ | ✓ | ✓ | | dst\_mask | ✓ | ✓ | ✓ | ✓ | | dstaddr | ✓ | ✓ | ✓ | ✓ | | dstport | ✓ | ✓ | ✓ | ✓ | | First | ✓ | ✓ | ✓ | ✓ | | input | ✓ | ✓ | ✓ | ✓ | | Last | ✓ | ✓ | ✓ | ✓ | | nexthop | ✓ | ✓ | ✓ | ✓ | | output | ✓ | ✓ | ✓ | ✓ | | prot | ✓ | ✓ | ✓ | ✓ | | src\_as | ✓ | ✓ | ✓ | ✓ | | src\_mask | ✓ | ✓ | ✓ | ✓ | | srcaddr | ✓ | ✓ | ✓ | ✓ | | srcport | ✓ | ✓ | ✓ | ✓ | | tcp\_flags | ✓ | ✓ | ✓ | ✓ | | tos | ✓ | ✓ | ✓ | ✓ | ### Netflow v6 NetObserv Flow support 18 unique Netflow v6 information elements (IE). | Name | Community | Basic | Standard | Premium | | ---------- | :-------: | :---: | :------: | :-----: | | dOctets | ✓ | ✓ | ✓ | ✓ | | dPkts | ✓ | ✓ | ✓ | ✓ | | dst\_as | ✓ | ✓ | ✓ | ✓ | | dst\_mask | ✓ | ✓ | ✓ | ✓ | | dstaddr | ✓ | ✓ | ✓ | ✓ | | dstport | ✓ | ✓ | ✓ | ✓ | | First | ✓ | ✓ | ✓ | ✓ | | input | ✓ | ✓ | ✓ | ✓ | | Last | ✓ | ✓ | ✓ | ✓ | | nexthop | ✓ | ✓ | ✓ | ✓ | | output | ✓ | ✓ | ✓ | ✓ | | prot | ✓ | ✓ | ✓ | ✓ | | src\_as | ✓ | ✓ | ✓ | ✓ | | src\_mask | ✓ | ✓ | ✓ | ✓ | | srcaddr | ✓ | ✓ | ✓ | ✓ | | srcport | ✓ | ✓ | ✓ | ✓ | | tcp\_flags | ✓ | ✓ | ✓ | ✓ | | tos | ✓ | ✓ | ✓ | ✓ | ### Netflow v7 NetObserv Flow support 19 unique Netflow v7 information elements (IE). | Name | Community | Basic | Standard | Premium | | ------------ | :-------: | :---: | :------: | :-----: | | dOctets | ✓ | ✓ | ✓ | ✓ | | dPkts | ✓ | ✓ | ✓ | ✓ | | dst\_as | ✓ | ✓ | ✓ | ✓ | | dst\_mask | ✓ | ✓ | ✓ | ✓ | | dstaddr | ✓ | ✓ | ✓ | ✓ | | dstport | ✓ | ✓ | ✓ | ✓ | | First | ✓ | ✓ | ✓ | ✓ | | input | ✓ | ✓ | ✓ | ✓ | | ipv4RouterSc | ✓ | ✓ | ✓ | ✓ | | Last | ✓ | ✓ | ✓ | ✓ | | nexthop | ✓ | ✓ | ✓ | ✓ | | output | ✓ | ✓ | ✓ | ✓ | | prot | ✓ | ✓ | ✓ | ✓ | | src\_as | ✓ | ✓ | ✓ | ✓ | | src\_mask | ✓ | ✓ | ✓ | ✓ | | srcaddr | ✓ | ✓ | ✓ | ✓ | | srcport | ✓ | ✓ | ✓ | ✓ | | tcp\_flags | ✓ | ✓ | ✓ | ✓ | | tos | ✓ | ✓ | ✓ | ✓ | ### Netflow v9 NetObserv Flow supports over 1500 unique Netflow v9 information elements (IE). | PEN | Vendor | IEs | | ----: | ------------------ | --: | | 0 | IANA | 462 | | 9 | Cisco | 581 | | 193 | Ericsson | 8 | | 4056 | StreamCORE | 28 | | 4321 | Riverbed | 12 | | 8712 | LANcope (Cisco) | 43 | | 25461 | Palo Alto Networks | 2 | | 33610 | FastIP / Boundary | 23 | | 35632 | ntop | 370 | | 40842 | A10 Networks | 15 | #### Standards-based IEs (PEN: 0) | ID | Name | Community | Basic | Standard | Premium | | --: | ---------------------------------------- | :-------: | :---: | :------: | :-----: | | 1 | octetDeltaCount | ✓ | ✓ | ✓ | ✓ | | 2 | packetDeltaCount | ✓ | ✓ | ✓ | ✓ | | 3 | deltaFlowCount | ✓ | ✓ | ✓ | ✓ | | 4 | protocolIdentifier | ✓ | ✓ | ✓ | ✓ | | 5 | ipClassOfService | ✓ | ✓ | ✓ | ✓ | | 6 | tcpControlBits | ✓ | ✓ | ✓ | ✓ | | 7 | sourceTransportPort | ✓ | ✓ | ✓ | ✓ | | 8 | sourceIPv4Address | ✓ | ✓ | ✓ | ✓ | | 9 | sourceIPv4PrefixLength | ✓ | ✓ | ✓ | ✓ | | 10 | ingressInterface | ✓ | ✓ | ✓ | ✓ | | 11 | destinationTransportPort | ✓ | ✓ | ✓ | ✓ | | 12 | destinationIPv4Address | ✓ | ✓ | ✓ | ✓ | | 13 | destinationIPv4PrefixLength | ✓ | ✓ | ✓ | ✓ | | 14 | egressInterface | ✓ | ✓ | ✓ | ✓ | | 15 | ipNextHopIPv4Address | ✓ | ✓ | ✓ | ✓ | | 16 | bgpSourceAsNumber | ✓ | ✓ | ✓ | ✓ | | 17 | bgpDestinationAsNumber | ✓ | ✓ | ✓ | ✓ | | 18 | bgpNextHopIPv4Address | ✓ | ✓ | ✓ | ✓ | | 19 | postMCastPacketDeltaCount | ✓ | ✓ | ✓ | ✓ | | 20 | postMCastOctetDeltaCount | ✓ | ✓ | ✓ | ✓ | | 21 | flowEndSysUpTime | ✓ | ✓ | ✓ | ✓ | | 22 | flowStartSysUpTime | ✓ | ✓ | ✓ | ✓ | | 23 | postOctetDeltaCount | ✓ | ✓ | ✓ | ✓ | | 24 | postPacketDeltaCount | ✓ | ✓ | ✓ | ✓ | | 25 | minimumIpTotalLength | ✓ | ✓ | ✓ | ✓ | | 26 | maximumIpTotalLength | ✓ | ✓ | ✓ | ✓ | | 27 | sourceIPv6Address | ✓ | ✓ | ✓ | ✓ | | 28 | destinationIPv6Address | ✓ | ✓ | ✓ | ✓ | | 29 | sourceIPv6PrefixLength | ✓ | ✓ | ✓ | ✓ | | 30 | destinationIPv6PrefixLength | ✓ | ✓ | ✓ | ✓ | | 31 | flowLabelIPv6 | ✓ | ✓ | ✓ | ✓ | | 32 | icmpTypeCodeIPv4 | ✓ | ✓ | ✓ | ✓ | | 33 | igmpType | ✓ | ✓ | ✓ | ✓ | | 34 | samplingInterval | ✓ | ✓ | ✓ | ✓ | | 35 | samplingAlgorithm | ✓ | ✓ | ✓ | ✓ | | 36 | flowActiveTimeout | ✓ | ✓ | ✓ | ✓ | | 37 | flowIdleTimeout | ✓ | ✓ | ✓ | ✓ | | 38 | engineType | ✓ | ✓ | ✓ | ✓ | | 39 | engineId | ✓ | ✓ | ✓ | ✓ | | 40 | exportedOctetTotalCount | ✓ | ✓ | ✓ | ✓ | | 41 | exportedMessageTotalCount | ✓ | ✓ | ✓ | ✓ | | 42 | exportedFlowRecordTotalCount | ✓ | ✓ | ✓ | ✓ | | 44 | sourceIPv4Prefix | ✓ | ✓ | ✓ | ✓ | | 45 | destinationIPv4Prefix | ✓ | ✓ | ✓ | ✓ | | 46 | mplsTopLabelType | ✓ | ✓ | ✓ | ✓ | | 47 | mplsTopLabelIPv4Address | ✓ | ✓ | ✓ | ✓ | | 48 | samplerId | ✓ | ✓ | ✓ | ✓ | | 49 | samplerMode | ✓ | ✓ | ✓ | ✓ | | 50 | samplerRandomInterval | ✓ | ✓ | ✓ | ✓ | | 51 | classId | ✓ | ✓ | ✓ | ✓ | | 52 | minimumTTL | ✓ | ✓ | ✓ | ✓ | | 53 | maximumTTL | ✓ | ✓ | ✓ | ✓ | | 54 | fragmentIdentification | ✓ | ✓ | ✓ | ✓ | | 55 | postIpClassOfService | ✓ | ✓ | ✓ | ✓ | | 56 | sourceMacAddress | ✓ | ✓ | ✓ | ✓ | | 57 | postDestinationMacAddress | ✓ | ✓ | ✓ | ✓ | | 58 | vlanId | ✓ | ✓ | ✓ | ✓ | | 59 | postVlanId | ✓ | ✓ | ✓ | ✓ | | 60 | ipVersion | ✓ | ✓ | ✓ | ✓ | | 61 | flowDirection | ✓ | ✓ | ✓ | ✓ | | 62 | ipNextHopIPv6Address | ✓ | ✓ | ✓ | ✓ | | 63 | bgpNextHopIPv6Address | ✓ | ✓ | ✓ | ✓ | | 64 | ipv6ExtensionHeaders | ✓ | ✓ | ✓ | ✓ | | 65 | transportPacketLoss `Cisco Legacy` | | | ✓ | ✓ | | 66 | transportUnreachability `Cisco Legacy` | | | ✓ | ✓ | | 67 | transportLatency `Cisco Legacy` | | | ✓ | ✓ | | 68 | dataPoints `Cisco Legacy` | | | ✓ | ✓ | | 69 | variance `Cisco Legacy` | | | ✓ | ✓ | | 70 | mplsTopLabelStackSection | | ✓ | ✓ | ✓ | | 71 | mplsLabelStackSection2 | | ✓ | ✓ | ✓ | | 72 | mplsLabelStackSection3 | | ✓ | ✓ | ✓ | | 73 | mplsLabelStackSection4 | | ✓ | ✓ | ✓ | | 74 | mplsLabelStackSection5 | | ✓ | ✓ | ✓ | | 75 | mplsLabelStackSection6 | | ✓ | ✓ | ✓ | | 76 | mplsLabelStackSection7 | | ✓ | ✓ | ✓ | | 77 | mplsLabelStackSection8 | | ✓ | ✓ | ✓ | | 78 | mplsLabelStackSection9 | | ✓ | ✓ | ✓ | | 79 | mplsLabelStackSection10 | | ✓ | ✓ | ✓ | | 80 | destinationMacAddress | ✓ | ✓ | ✓ | ✓ | | 81 | postSourceMacAddress | ✓ | ✓ | ✓ | ✓ | | 82 | interfaceName | ✓ | ✓ | ✓ | ✓ | | 83 | interfaceDescription | ✓ | ✓ | ✓ | ✓ | | 84 | samplerName | ✓ | ✓ | ✓ | ✓ | | 85 | octetTotalCount | ✓ | ✓ | ✓ | ✓ | | 86 | packetTotalCount | ✓ | ✓ | ✓ | ✓ | | 87 | flagsAndSamplerId | ✓ | ✓ | ✓ | ✓ | | 88 | fragmentOffset | ✓ | ✓ | ✓ | ✓ | | 89 | forwardingStatus | ✓ | ✓ | ✓ | ✓ | | 90 | mplsVpnRouteDistinguisher | | ✓ | ✓ | ✓ | | 91 | mplsTopLabelPrefixLength | | ✓ | ✓ | ✓ | | 92 | srcTrafficIndex | | ✓ | ✓ | ✓ | | 93 | dstTrafficIndex | | ✓ | ✓ | ✓ | | 94 | applicationDescription | | ✓ | ✓ | ✓ | | 95 | applicationId | | ✓ | ✓ | ✓ | | 96 | applicationName | | ✓ | ✓ | ✓ | | 97 | subApplicationTag `Cisco Legacy` | | | ✓ | ✓ | | 98 | postIpDiffServCodePoint | | ✓ | ✓ | ✓ | | 99 | multicastReplicationFactor | | ✓ | ✓ | ✓ | | 100 | className | | ✓ | ✓ | ✓ | | 101 | classificationEngineId | | ✓ | ✓ | ✓ | | 102 | layer2packetSectionOffset | | ✓ | ✓ | ✓ | | 103 | layer2packetSectionSize | | ✓ | ✓ | ✓ | | 104 | layer2packetSectionData | | ✓ | ✓ | ✓ | | 105 | applicationVersion `Cisco Legacy` | | | ✓ | ✓ | | 106 | applicationVersionName `Cisco Legacy` | | | ✓ | ✓ | | 107 | applicationVendor `Cisco Legacy` | | | ✓ | ✓ | | 109 | subApplicationName `Cisco Legacy` | | | ✓ | ✓ | | 110 | subApplicationDescription `Cisco Legacy` | | | ✓ | ✓ | | 111 | templateParameterRangeEnd `Cisco Legacy` | | | ✓ | ✓ | | 128 | bgpNextAdjacentAsNumber | | ✓ | ✓ | ✓ | | 129 | bgpPrevAdjacentAsNumber | | ✓ | ✓ | ✓ | | 130 | exporterIPv4Address | ✓ | ✓ | ✓ | ✓ | | 131 | exporterIPv6Address | ✓ | ✓ | ✓ | ✓ | | 132 | droppedOctetDeltaCount | | ✓ | ✓ | ✓ | | 133 | droppedPacketDeltaCount | | ✓ | ✓ | ✓ | | 134 | droppedOctetTotalCount | | ✓ | ✓ | ✓ | | 135 | droppedPacketTotalCount | | ✓ | ✓ | ✓ | | 136 | flowEndReason | | ✓ | ✓ | ✓ | | 137 | commonPropertiesId | | ✓ | ✓ | ✓ | | 138 | observationPointId | | ✓ | ✓ | ✓ | | 139 | icmpTypeCodeIPv6 | | ✓ | ✓ | ✓ | | 140 | mplsTopLabelIPv6Address | | ✓ | ✓ | ✓ | | 141 | lineCardId | | ✓ | ✓ | ✓ | | 142 | portId | | ✓ | ✓ | ✓ | | 143 | meteringProcessId | | ✓ | ✓ | ✓ | | 144 | exportingProcessId | | ✓ | ✓ | ✓ | | 145 | templateId | | ✓ | ✓ | ✓ | | 146 | wlanChannelId | | ✓ | ✓ | ✓ | | 147 | wlanSSID | | ✓ | ✓ | ✓ | | 148 | flowId | | ✓ | ✓ | ✓ | | 149 | observationDomainId | | ✓ | ✓ | ✓ | | 150 | flowStartSeconds | ✓ | ✓ | ✓ | ✓ | | 151 | flowEndSeconds | ✓ | ✓ | ✓ | ✓ | | 152 | flowStartMilliseconds | ✓ | ✓ | ✓ | ✓ | | 153 | flowEndMilliseconds | ✓ | ✓ | ✓ | ✓ | | 154 | flowStartMicroseconds | ✓ | ✓ | ✓ | ✓ | | 155 | flowEndMicroseconds | ✓ | ✓ | ✓ | ✓ | | 156 | flowStartNanoseconds | ✓ | ✓ | ✓ | ✓ | | 157 | flowEndNanoseconds | ✓ | ✓ | ✓ | ✓ | | 158 | flowStartDeltaMicroseconds | | ✓ | ✓ | ✓ | | 159 | flowEndDeltaMicroseconds | | ✓ | ✓ | ✓ | | 160 | systemInitTimeMilliseconds | | ✓ | ✓ | ✓ | | 161 | flowDurationMilliseconds | | ✓ | ✓ | ✓ | | 162 | flowDurationMicroseconds | | ✓ | ✓ | ✓ | | 163 | observedFlowTotalCount | | ✓ | ✓ | ✓ | | 164 | ignoredPacketTotalCount | | ✓ | ✓ | ✓ | | 165 | ignoredOctetTotalCount | | ✓ | ✓ | ✓ | | 166 | notSentFlowTotalCount | | ✓ | ✓ | ✓ | | 167 | notSentPacketTotalCount | | ✓ | ✓ | ✓ | | 168 | notSentOctetTotalCount | | ✓ | ✓ | ✓ | | 169 | destinationIPv6Prefix | | ✓ | ✓ | ✓ | | 170 | sourceIPv6Prefix | | ✓ | ✓ | ✓ | | 171 | postOctetTotalCount | | ✓ | ✓ | ✓ | | 172 | postPacketTotalCount | | ✓ | ✓ | ✓ | | 173 | flowKeyIndicator | | ✓ | ✓ | ✓ | | 174 | postMCastPacketTotalCount | | ✓ | ✓ | ✓ | | 175 | postMCastOctetTotalCount | | ✓ | ✓ | ✓ | | 176 | icmpTypeIPv4 | | ✓ | ✓ | ✓ | | 177 | icmpCodeIPv4 | | ✓ | ✓ | ✓ | | 178 | icmpTypeIPv6 | | ✓ | ✓ | ✓ | | 179 | icmpCodeIPv6 | | ✓ | ✓ | ✓ | | 180 | udpSourcePort | | ✓ | ✓ | ✓ | | 181 | udpDestinationPort | | ✓ | ✓ | ✓ | | 182 | tcpSourcePort | | ✓ | ✓ | ✓ | | 183 | tcpDestinationPort | | ✓ | ✓ | ✓ | | 184 | tcpSequenceNumber | | ✓ | ✓ | ✓ | | 185 | tcpAcknowledgementNumber | | ✓ | ✓ | ✓ | | 186 | tcpWindowSize | | ✓ | ✓ | ✓ | | 187 | tcpUrgentPointer | | ✓ | ✓ | ✓ | | 188 | tcpHeaderLength | | ✓ | ✓ | ✓ | | 189 | ipHeaderLength | | ✓ | ✓ | ✓ | | 190 | totalLengthIPv4 | | ✓ | ✓ | ✓ | | 191 | payloadLengthIPv6 | | ✓ | ✓ | ✓ | | 192 | ipTTL | | ✓ | ✓ | ✓ | | 193 | nextHeaderIPv6 | | ✓ | ✓ | ✓ | | 194 | mplsPayloadLength | | ✓ | ✓ | ✓ | | 195 | ipDiffServCodePoint | | ✓ | ✓ | ✓ | | 196 | ipPrecedence | | ✓ | ✓ | ✓ | | 197 | fragmentFlags | | ✓ | ✓ | ✓ | | 198 | octetDeltaSumOfSquares | | ✓ | ✓ | ✓ | | 199 | octetTotalSumOfSquares | | ✓ | ✓ | ✓ | | 200 | mplsTopLabelTTL | | ✓ | ✓ | ✓ | | 201 | mplsLabelStackLength | | ✓ | ✓ | ✓ | | 202 | mplsLabelStackDepth | | ✓ | ✓ | ✓ | | 203 | mplsTopLabelExp | | ✓ | ✓ | ✓ | | 204 | ipPayloadLength | | ✓ | ✓ | ✓ | | 205 | udpMessageLength | | ✓ | ✓ | ✓ | | 206 | isMulticast | | ✓ | ✓ | ✓ | | 207 | ipv4IHL | | ✓ | ✓ | ✓ | | 208 | ipv4Options | | ✓ | ✓ | ✓ | | 209 | tcpOptions | | ✓ | ✓ | ✓ | | 210 | paddingOctets | | ✓ | ✓ | ✓ | | 211 | collectorIPv4Address | | ✓ | ✓ | ✓ | | 212 | collectorIPv6Address | | ✓ | ✓ | ✓ | | 213 | exportInterface | | ✓ | ✓ | ✓ | | 214 | exportProtocolVersion | | ✓ | ✓ | ✓ | | 215 | exportTransportProtocol | | ✓ | ✓ | ✓ | | 216 | collectorTransportPort | | ✓ | ✓ | ✓ | | 217 | exporterTransportPort | | ✓ | ✓ | ✓ | | 218 | tcpSynTotalCount | | ✓ | ✓ | ✓ | | 219 | tcpFinTotalCount | | ✓ | ✓ | ✓ | | 220 | tcpRstTotalCount | | ✓ | ✓ | ✓ | | 221 | tcpPshTotalCount | | ✓ | ✓ | ✓ | | 222 | tcpAckTotalCount | | ✓ | ✓ | ✓ | | 223 | tcpUrgTotalCount | | ✓ | ✓ | ✓ | | 224 | ipTotalLength | | ✓ | ✓ | ✓ | | 225 | postNATSourceIPv4Address | | ✓ | ✓ | ✓ | | 226 | postNATDestinationIPv4Address | | ✓ | ✓ | ✓ | | 227 | postNAPTSourceTransportPort | | ✓ | ✓ | ✓ | | 228 | postNAPTDestinationTransportPort | | ✓ | ✓ | ✓ | | 229 | natOriginatingAddressRealm | | ✓ | ✓ | ✓ | | 230 | natEvent | | ✓ | ✓ | ✓ | | 231 | initiatorOctets | | ✓ | ✓ | ✓ | | 232 | responderOctets | | ✓ | ✓ | ✓ | | 233 | firewallEvent | | ✓ | ✓ | ✓ | | 234 | ingressVRFID | | ✓ | ✓ | ✓ | | 235 | egressVRFID | | ✓ | ✓ | ✓ | | 236 | VRFname | | ✓ | ✓ | ✓ | | 237 | postMplsTopLabelExp | | ✓ | ✓ | ✓ | | 238 | tcpWindowScale | | ✓ | ✓ | ✓ | | 239 | biflowDirection | | ✓ | ✓ | ✓ | | 240 | ethernetHeaderLength | | ✓ | ✓ | ✓ | | 241 | ethernetPayloadLength | | ✓ | ✓ | ✓ | | 242 | ethernetTotalLength | | ✓ | ✓ | ✓ | | 243 | dot1qVlanId | | ✓ | ✓ | ✓ | | 244 | dot1qPriority | | ✓ | ✓ | ✓ | | 245 | dot1qCustomerVlanId | | ✓ | ✓ | ✓ | | 246 | dot1qCustomerPriority | | ✓ | ✓ | ✓ | | 247 | metroEvcId | | ✓ | ✓ | ✓ | | 248 | metroEvcType | | ✓ | ✓ | ✓ | | 249 | pseudoWireId | | ✓ | ✓ | ✓ | | 250 | pseudoWireType | | ✓ | ✓ | ✓ | | 251 | pseudoWireControlWord | | ✓ | ✓ | ✓ | | 252 | ingressPhysicalInterface | | ✓ | ✓ | ✓ | | 253 | egressPhysicalInterface | | ✓ | ✓ | ✓ | | 254 | postDot1qVlanId | | ✓ | ✓ | ✓ | | 255 | postDot1qCustomerVlanId | | ✓ | ✓ | ✓ | | 256 | ethernetType | | ✓ | ✓ | ✓ | | 257 | postIpPrecedence | | ✓ | ✓ | ✓ | | 258 | collectionTimeMilliseconds | | ✓ | ✓ | ✓ | | 259 | exportSctpStreamId | | ✓ | ✓ | ✓ | | 260 | maxExportSeconds | | ✓ | ✓ | ✓ | | 261 | maxFlowEndSeconds | | ✓ | ✓ | ✓ | | 262 | messageMD5Checksum | | ✓ | ✓ | ✓ | | 263 | messageScope | | ✓ | ✓ | ✓ | | 264 | minExportSeconds | | ✓ | ✓ | ✓ | | 265 | minFlowStartSeconds | | ✓ | ✓ | ✓ | | 266 | opaqueOctets | | ✓ | ✓ | ✓ | | 267 | sessionScope | | ✓ | ✓ | ✓ | | 268 | maxFlowEndMicroseconds | | ✓ | ✓ | ✓ | | 269 | maxFlowEndMilliseconds | | ✓ | ✓ | ✓ | | 270 | maxFlowEndNanoseconds | | ✓ | ✓ | ✓ | | 271 | minFlowStartMicroseconds | | ✓ | ✓ | ✓ | | 272 | minFlowStartMilliseconds | | ✓ | ✓ | ✓ | | 273 | minFlowStartNanoseconds | | ✓ | ✓ | ✓ | | 274 | collectorCertificate | | ✓ | ✓ | ✓ | | 275 | exporterCertificate | | ✓ | ✓ | ✓ | | 276 | dataRecordsReliability | | ✓ | ✓ | ✓ | | 277 | observationPointType | | ✓ | ✓ | ✓ | | 278 | newConnectionDeltaCount | | ✓ | ✓ | ✓ | | 279 | connectionSumDurationSeconds | | ✓ | ✓ | ✓ | | 280 | connectionTransactionId | | ✓ | ✓ | ✓ | | 281 | postNATSourceIPv6Address | | ✓ | ✓ | ✓ | | 282 | postNATDestinationIPv6Address | | ✓ | ✓ | ✓ | | 283 | natPoolId | | ✓ | ✓ | ✓ | | 284 | natPoolName | | ✓ | ✓ | ✓ | | 285 | anonymizationFlags | | ✓ | ✓ | ✓ | | 286 | anonymizationTechnique | | ✓ | ✓ | ✓ | | 287 | informationElementIndex | | ✓ | ✓ | ✓ | | 288 | p2pTechnology | | ✓ | ✓ | ✓ | | 289 | tunnelTechnology | | ✓ | ✓ | ✓ | | 290 | encryptedTechnology | | ✓ | ✓ | ✓ | | 294 | bgpValidityState | | ✓ | ✓ | ✓ | | 295 | IPSecSPI | | ✓ | ✓ | ✓ | | 296 | greKey | | ✓ | ✓ | ✓ | | 297 | natType | | ✓ | ✓ | ✓ | | 298 | initiatorPackets | | ✓ | ✓ | ✓ | | 299 | responderPackets | | ✓ | ✓ | ✓ | | 300 | observationDomainName | | ✓ | ✓ | ✓ | | 301 | selectionSequenceId | | ✓ | ✓ | ✓ | | 302 | selectorId | | ✓ | ✓ | ✓ | | 303 | informationElementId | | ✓ | ✓ | ✓ | | 304 | selectorAlgorithm | | ✓ | ✓ | ✓ | | 305 | samplingPacketInterval | | ✓ | ✓ | ✓ | | 306 | samplingPacketSpace | | ✓ | ✓ | ✓ | | 307 | samplingTimeInterval | | ✓ | ✓ | ✓ | | 308 | samplingTimeSpace | | ✓ | ✓ | ✓ | | 309 | samplingSize | | ✓ | ✓ | ✓ | | 310 | samplingPopulation | | ✓ | ✓ | ✓ | | 311 | samplingProbability | | ✓ | ✓ | ✓ | | 312 | dataLinkFrameSize | | ✓ | ✓ | ✓ | | 313 | ipHeaderPacketSection | | ✓ | ✓ | ✓ | | 314 | ipPayloadPacketSection | | ✓ | ✓ | ✓ | | 315 | dataLinkFrameSection | | ✓ | ✓ | ✓ | | 316 | mplsLabelStackSection | | ✓ | ✓ | ✓ | | 317 | mplsPayloadPacketSection | | ✓ | ✓ | ✓ | | 318 | selectorIdTotalPktsObserved | | ✓ | ✓ | ✓ | | 319 | selectorIdTotalPktsSelected | | ✓ | ✓ | ✓ | | 320 | absoluteError | | ✓ | ✓ | ✓ | | 321 | relativeError | | ✓ | ✓ | ✓ | | 322 | observationTimeSeconds | | ✓ | ✓ | ✓ | | 323 | observationTimeMilliseconds | | ✓ | ✓ | ✓ | | 324 | observationTimeMicroseconds | | ✓ | ✓ | ✓ | | 325 | observationTimeNanoseconds | | ✓ | ✓ | ✓ | | 326 | digestHashValue | | ✓ | ✓ | ✓ | | 327 | hashIPPayloadOffset | | ✓ | ✓ | ✓ | | 328 | hashIPPayloadSize | | ✓ | ✓ | ✓ | | 329 | hashOutputRangeMin | | ✓ | ✓ | ✓ | | 330 | hashOutputRangeMax | | ✓ | ✓ | ✓ | | 331 | hashSelectedRangeMin | | ✓ | ✓ | ✓ | | 332 | hashSelectedRangeMax | | ✓ | ✓ | ✓ | | 333 | hashDigestOutput | | ✓ | ✓ | ✓ | | 334 | hashInitialiserValue | | ✓ | ✓ | ✓ | | 335 | selectorName | | ✓ | ✓ | ✓ | | 336 | upperCILimit | | ✓ | ✓ | ✓ | | 337 | lowerCILimit | | ✓ | ✓ | ✓ | | 338 | confidenceLevel | | ✓ | ✓ | ✓ | | 339 | informationElementDataType | | ✓ | ✓ | ✓ | | 340 | informationElementDescription | | ✓ | ✓ | ✓ | | 341 | informationElementName | | ✓ | ✓ | ✓ | | 342 | informationElementRangeBegin | | ✓ | ✓ | ✓ | | 343 | informationElementRangeEnd | | ✓ | ✓ | ✓ | | 344 | informationElementSemantics | | ✓ | ✓ | ✓ | | 345 | informationElementUnits | | ✓ | ✓ | ✓ | | 346 | privateEnterpriseNumber | | ✓ | ✓ | ✓ | | 347 | virtualStationInterfaceId | | ✓ | ✓ | ✓ | | 348 | virtualStationInterfaceName | | ✓ | ✓ | ✓ | | 349 | virtualStationUUID | | ✓ | ✓ | ✓ | | 350 | virtualStationName | | ✓ | ✓ | ✓ | | 351 | layer2SegmentId | | ✓ | ✓ | ✓ | | 352 | layer2OctetDeltaCount | | ✓ | ✓ | ✓ | | 353 | layer2OctetTotalCount | | ✓ | ✓ | ✓ | | 354 | ingressUnicastPacketTotalCount | | ✓ | ✓ | ✓ | | 355 | ingressMulticastPacketTotalCount | | ✓ | ✓ | ✓ | | 356 | ingressBroadcastPacketTotalCount | | ✓ | ✓ | ✓ | | 357 | egressUnicastPacketTotalCount | | ✓ | ✓ | ✓ | | 358 | egressBroadcastPacketTotalCount | | ✓ | ✓ | ✓ | | 359 | monitoringIntervalStartMilliSeconds | | ✓ | ✓ | ✓ | | 360 | monitoringIntervalEndMilliSeconds | | ✓ | ✓ | ✓ | | 361 | portRangeStart | | ✓ | ✓ | ✓ | | 362 | portRangeEnd | | ✓ | ✓ | ✓ | | 363 | portRangeStepSize | | ✓ | ✓ | ✓ | | 364 | portRangeNumPorts | | ✓ | ✓ | ✓ | | 365 | staMacAddress | | ✓ | ✓ | ✓ | | 366 | staIPv4Address | | ✓ | ✓ | ✓ | | 367 | wtpMacAddress | | ✓ | ✓ | ✓ | | 368 | ingressInterfaceType | | ✓ | ✓ | ✓ | | 369 | egressInterfaceType | | ✓ | ✓ | ✓ | | 370 | rtpSequenceNumber | | ✓ | ✓ | ✓ | | 371 | userName | | ✓ | ✓ | ✓ | | 372 | applicationCategoryName | | ✓ | ✓ | ✓ | | 373 | applicationSubCategoryName | | ✓ | ✓ | ✓ | | 374 | applicationGroupName | | ✓ | ✓ | ✓ | | 375 | originalFlowsPresent | | ✓ | ✓ | ✓ | | 376 | originalFlowsInitiated | | ✓ | ✓ | ✓ | | 377 | originalFlowsCompleted | | ✓ | ✓ | ✓ | | 378 | distinctCountOfSourceIPAddress | | ✓ | ✓ | ✓ | | 379 | distinctCountOfDestinationIPAddress | | ✓ | ✓ | ✓ | | 380 | distinctCountOfSourceIPv4Address | | ✓ | ✓ | ✓ | | 381 | distinctCountOfDestinationIPv4Address | | ✓ | ✓ | ✓ | | 382 | distinctCountOfSourceIPv6Address | | ✓ | ✓ | ✓ | | 383 | distinctCountOfDestinationIPv6Address | | ✓ | ✓ | ✓ | | 384 | valueDistributionMethod | | ✓ | ✓ | ✓ | | 385 | rfc3550JitterMilliseconds | | ✓ | ✓ | ✓ | | 386 | rfc3550JitterMicroseconds | | ✓ | ✓ | ✓ | | 387 | rfc3550JitterNanoseconds | | ✓ | ✓ | ✓ | | 388 | dot1qDEI | | ✓ | ✓ | ✓ | | 389 | dot1qCustomerDEI | | ✓ | ✓ | ✓ | | 390 | flowSelectorAlgorithm | | ✓ | ✓ | ✓ | | 391 | flowSelectedOctetDeltaCount | | ✓ | ✓ | ✓ | | 392 | flowSelectedPacketDeltaCount | | ✓ | ✓ | ✓ | | 393 | flowSelectedFlowDeltaCount | | ✓ | ✓ | ✓ | | 394 | selectorIDTotalFlowsObserved | | ✓ | ✓ | ✓ | | 395 | selectorIDTotalFlowsSelected | | ✓ | ✓ | ✓ | | 396 | samplingFlowInterval | | ✓ | ✓ | ✓ | | 397 | samplingFlowSpacing | | ✓ | ✓ | ✓ | | 398 | flowSamplingTimeInterval | | ✓ | ✓ | ✓ | | 399 | flowSamplingTimeSpacing | | ✓ | ✓ | ✓ | | 400 | hashFlowDomain | | ✓ | ✓ | ✓ | | 401 | transportOctetDeltaCount | | ✓ | ✓ | ✓ | | 402 | transportPacketDeltaCount | | ✓ | ✓ | ✓ | | 403 | originalExporterIPv4Address | | ✓ | ✓ | ✓ | | 404 | originalExporterIPv6Address | | ✓ | ✓ | ✓ | | 405 | originalObservationDomainId | | ✓ | ✓ | ✓ | | 406 | intermediateProcessId | | ✓ | ✓ | ✓ | | 407 | ignoredDataRecordTotalCount | | ✓ | ✓ | ✓ | | 408 | dataLinkFrameType | | ✓ | ✓ | ✓ | | 409 | sectionOffset | | ✓ | ✓ | ✓ | | 410 | sectionExportedOctets | | ✓ | ✓ | ✓ | | 411 | dot1qServiceInstanceTag | | ✓ | ✓ | ✓ | | 412 | dot1qServiceInstanceId | | ✓ | ✓ | ✓ | | 413 | dot1qServiceInstancePriority | | ✓ | ✓ | ✓ | | 414 | dot1qCustomerSourceMacAddress | | ✓ | ✓ | ✓ | | 415 | dot1qCustomerDestinationMacAddress | | ✓ | ✓ | ✓ | | 416 | layer2OctetDeltaCount | | ✓ | ✓ | ✓ | | 417 | postLayer2OctetDeltaCount | | ✓ | ✓ | ✓ | | 418 | postMCastLayer2OctetDeltaCount | | ✓ | ✓ | ✓ | | 419 | layer2OctetTotalCount | | ✓ | ✓ | ✓ | | 420 | postLayer2OctetTotalCount | | ✓ | ✓ | ✓ | | 421 | postMCastLayer2OctetTotalCount | | ✓ | ✓ | ✓ | | 422 | minimumLayer2TotalLength | | ✓ | ✓ | ✓ | | 423 | maximumLayer2TotalLength | | ✓ | ✓ | ✓ | | 424 | droppedLayer2OctetDeltaCount | | ✓ | ✓ | ✓ | | 425 | droppedLayer2OctetTotalCount | | ✓ | ✓ | ✓ | | 426 | ignoredLayer2OctetTotalCount | | ✓ | ✓ | ✓ | | 427 | notSentLayer2OctetTotalCount | | ✓ | ✓ | ✓ | | 428 | layer2OctetDeltaSumOfSquares | | ✓ | ✓ | ✓ | | 429 | layer2OctetTotalSumOfSquares | | ✓ | ✓ | ✓ | | 430 | layer2FrameDeltaCount | | ✓ | ✓ | ✓ | | 431 | layer2FrameTotalCount | | ✓ | ✓ | ✓ | | 432 | pseudoWireDestinationIPv4Address | | ✓ | ✓ | ✓ | | 433 | ignoredLayer2FrameTotalCount | | ✓ | ✓ | ✓ | | 434 | mibObjectValueInteger | | ✓ | ✓ | ✓ | | 435 | mibObjectValueOctetString | | ✓ | ✓ | ✓ | | 436 | mibObjectValueOID | | ✓ | ✓ | ✓ | | 437 | mibObjectValueBits | | ✓ | ✓ | ✓ | | 438 | mibObjectValueIPAddress | | ✓ | ✓ | ✓ | | 439 | mibObjectValueCounter | | ✓ | ✓ | ✓ | | 440 | mibObjectValueGauge | | ✓ | ✓ | ✓ | | 441 | mibObjectValueTimeTicks | | ✓ | ✓ | ✓ | | 442 | mibObjectValueUnsigned | | ✓ | ✓ | ✓ | | 445 | mibObjectIdentifier | | ✓ | ✓ | ✓ | | 446 | mibSubIdentifier | | ✓ | ✓ | ✓ | | 447 | mibIndexIndicator | | ✓ | ✓ | ✓ | | 448 | mibCaptureTimeSemantics | | ✓ | ✓ | ✓ | | 449 | mibContextEngineID | | ✓ | ✓ | ✓ | | 450 | mibContextName | | ✓ | ✓ | ✓ | | 451 | mibObjectName | | ✓ | ✓ | ✓ | | 452 | mibObjectDescription | | ✓ | ✓ | ✓ | | 453 | mibObjectSyntax | | ✓ | ✓ | ✓ | | 454 | mibModuleName | | ✓ | ✓ | ✓ | | 455 | mobileIMSI | | ✓ | ✓ | ✓ | | 456 | mobileMSISDN | | ✓ | ✓ | ✓ | | 457 | httpStatusCode | | ✓ | ✓ | ✓ | | 458 | sourceTransportPortsLimit | | ✓ | ✓ | ✓ | | 459 | httpRequestMethod | | ✓ | ✓ | ✓ | | 460 | httpRequestHost | | ✓ | ✓ | ✓ | | 461 | httpRequestTarget | | ✓ | ✓ | ✓ | | 462 | httpMessageVersion | | ✓ | ✓ | ✓ | | 463 | natInstanceID | | ✓ | ✓ | ✓ | | 464 | internalAddressRealm | | ✓ | ✓ | ✓ | | 465 | externalAddressRealm | | ✓ | ✓ | ✓ | | 466 | natQuotaExceededEvent | | ✓ | ✓ | ✓ | | 467 | natThresholdEvent | | ✓ | ✓ | ✓ | | 468 | httpUserAgent | | ✓ | ✓ | ✓ | | 469 | httpContentType | | ✓ | ✓ | ✓ | | 470 | httpReasonPhrase | | ✓ | ✓ | ✓ | | 471 | maxSessionEntries | | ✓ | ✓ | ✓ | | 472 | maxBIBEntries | | ✓ | ✓ | ✓ | | 473 | maxEntriesPerUser | | ✓ | ✓ | ✓ | | 474 | maxSubscribers | | ✓ | ✓ | ✓ | | 475 | maxFragmentsPendingReassembly | | ✓ | ✓ | ✓ | | 476 | addressPoolHighThreshold | | ✓ | ✓ | ✓ | | 477 | addressPoolLowThreshold | | ✓ | ✓ | ✓ | | 478 | addressPortMappingHighThreshold | | ✓ | ✓ | ✓ | | 479 | addressPortMappingLowThreshold | | ✓ | ✓ | ✓ | | 480 | addressPortMappingPerUserHighThreshold | | ✓ | ✓ | ✓ | | 481 | globalAddressMappingHighThreshold | | ✓ | ✓ | ✓ | | 482 | vpnIdentifier | | ✓ | ✓ | ✓ | | 483 | bgpCommunity | | ✓ | ✓ | ✓ | | 486 | bgpExtendedCommunity | | ✓ | ✓ | ✓ | | 489 | bgpLargeCommunity | | ✓ | ✓ | ✓ | #### Cisco (PEN: 9) | Name | Community | Basic | Standard | Premium | | ---------------------------------------------------- | :-------: | :---: | :------: | :-----: | | AAA\_USERNAME | | ✓ | ✓ | ✓ | | application business-relevance | | ✓ | ✓ | ✓ | | application category name | | ✓ | ✓ | ✓ | | application delay average | | ✓ | ✓ | ✓ | | application family name | | ✓ | ✓ | ✓ | | application group name | | ✓ | ✓ | ✓ | | application http uri statistics | | ✓ | ✓ | ✓ | | application media bytes counter | | ✓ | ✓ | ✓ | | application media bytes counter permanent | | ✓ | ✓ | ✓ | | application media bytes rate | | ✓ | ✓ | ✓ | | application media bytes rate per-flow | | ✓ | ✓ | ✓ | | application media bytes rate per-flow max | | ✓ | ✓ | ✓ | | application media bytes rate per-flow min | | ✓ | ✓ | ✓ | | application media event | | ✓ | ✓ | ✓ | | application media packets counter | | ✓ | ✓ | ✓ | | application media packets counter permanen | | ✓ | ✓ | ✓ | | application media packets rate | | ✓ | ✓ | ✓ | | application media packets rate variation | | ✓ | ✓ | ✓ | | application media packets rate variation m | | ✓ | ✓ | ✓ | | application media packets rate variation m | | ✓ | ✓ | ✓ | | application media packets rate variation s | | ✓ | ✓ | ✓ | | application set name | | ✓ | ✓ | ✓ | | application sub category name | | ✓ | ✓ | ✓ | | application traffic-class | | ✓ | ✓ | ✓ | | application transaction counter new | | ✓ | ✓ | ✓ | | application video eMOS compression bitstre | | ✓ | ✓ | ✓ | | application video eMOS compression network | | ✓ | ✓ | ✓ | | application video eMOS packet-loss bitstre | | ✓ | ✓ | ✓ | | application video eMOS packet-loss network | | ✓ | ✓ | ✓ | | application video frame I counter bytes | | ✓ | ✓ | ✓ | | application video frame I counter frames | | ✓ | ✓ | ✓ | | application video frame I counter packets | | ✓ | ✓ | ✓ | | application video frame I counter packets | | ✓ | ✓ | ✓ | | application video frame I slice-quantizati | | ✓ | ✓ | ✓ | | application video frame LTR counter bytes | | ✓ | ✓ | ✓ | | application video frame LTR counter frames | | ✓ | ✓ | ✓ | | application video frame LTR counter packet | | ✓ | ✓ | ✓ | | application video frame LTR counter packet | | ✓ | ✓ | ✓ | | application video frame LTR slice-quantiza | | ✓ | ✓ | ✓ | | application video frame NR counter bytes | | ✓ | ✓ | ✓ | | application video frame NR counter frames | | ✓ | ✓ | ✓ | | application video frame NR counter packets | | ✓ | ✓ | ✓ | | application video frame NR counter packets | | ✓ | ✓ | ✓ | | application video frame NR slice-quantizat | | ✓ | ✓ | ✓ | | application video frame percentage damaged | | ✓ | ✓ | ✓ | | application video frame rate | | ✓ | ✓ | ✓ | | application video frame STR counter bytes | | ✓ | ✓ | ✓ | | application video frame STR counter frames | | ✓ | ✓ | ✓ | | application video frame STR counter packet | | ✓ | ✓ | ✓ | | application video frame STR counter packet | | ✓ | ✓ | ✓ | | application video frame STR slice-quantiza | | ✓ | ✓ | ✓ | | application video frame super-P counter by | | ✓ | ✓ | ✓ | | application video frame super-P counter fr | | ✓ | ✓ | ✓ | | application video frame super-P counter pa | | ✓ | ✓ | ✓ | | application video frame super-P counter pa | | ✓ | ✓ | ✓ | | application video frame super-P slice-quan | | ✓ | ✓ | ✓ | | application video level-of-motion | | ✓ | ✓ | ✓ | | application video payload bitrate average | | ✓ | ✓ | ✓ | | application video payload bitrate fluctuat | | ✓ | ✓ | ✓ | | application video resolution height last | | ✓ | ✓ | ✓ | | application video resolution width last | | ✓ | ✓ | ✓ | | application video scene-complexity | | ✓ | ✓ | ✓ | | application voice call duration | | ✓ | ✓ | ✓ | | application voice codec id | | ✓ | ✓ | ✓ | | application voice concealment-ratio averag | | ✓ | ✓ | ✓ | | application voice delay end-point | | ✓ | ✓ | ✓ | | application voice delay round-trip | | ✓ | ✓ | ✓ | | application voice jitter buffer-overrun | | ✓ | ✓ | ✓ | | application voice jitter configured initia | | ✓ | ✓ | ✓ | | application voice jitter configured maximu | | ✓ | ✓ | ✓ | | application voice jitter configured minimu | | ✓ | ✓ | ✓ | | application voice jitter configured type | | ✓ | ✓ | ✓ | | application voice mos conversation | | ✓ | ✓ | ✓ | | application voice mos listening | | ✓ | ✓ | ✓ | | application voice number called | | ✓ | ✓ | ✓ | | application voice number calling | | ✓ | ✓ | ✓ | | application voice packet conceal-count | | ✓ | ✓ | ✓ | | application voice play delay current | | ✓ | ✓ | ✓ | | application voice play delay maximum | | ✓ | ✓ | ✓ | | application voice play delay minimum | | ✓ | ✓ | ✓ | | application voice r-factor 1 | | ✓ | ✓ | ✓ | | application voice r-factor 2 | | ✓ | ✓ | ✓ | | application voice router global-call-id | | ✓ | ✓ | ✓ | | application voice rx bad-packet | | ✓ | ✓ | ✓ | | application voice rx early-packet count | | ✓ | ✓ | ✓ | | application voice rx late-packet count | | ✓ | ✓ | ✓ | | application voice rx out-of-sequence | | ✓ | ✓ | ✓ | | application voice setup time | | ✓ | ✓ | ✓ | | application voice sip call-id | | ✓ | ✓ | ✓ | | appqoe ssl policy action | | ✓ | ✓ | ✓ | | appqoe ssl service type | | ✓ | ✓ | ✓ | | appqoe ssl traffic type | | ✓ | ✓ | ✓ | | art count new connections | | ✓ | ✓ | ✓ | | art count responses | | ✓ | ✓ | ✓ | | art count responses histogram bucket1 | | ✓ | ✓ | ✓ | | art count responses histogram bucket2 | | ✓ | ✓ | ✓ | | art count responses histogram bucket3 | | ✓ | ✓ | ✓ | | art count responses histogram bucket4 | | ✓ | ✓ | ✓ | | art count responses histogram bucket5 | | ✓ | ✓ | ✓ | | art count responses histogram bucket6 | | ✓ | ✓ | ✓ | | art count responses histogram bucket7 | | ✓ | ✓ | ✓ | | artClientNetworkTimeLongLivedMaximum | | ✓ | ✓ | ✓ | | artClientNetworkTimeLongLivedMinimum | | ✓ | ✓ | ✓ | | artClientpackets | | ✓ | ✓ | ✓ | | artServerNetworkTimeLongLivedMaximum | | ✓ | ✓ | ✓ | | artServerNetworkTimeLongLivedMinimum | | ✓ | ✓ | ✓ | | artServerpackets | | ✓ | ✓ | ✓ | | audio concealment ratio maximum | | ✓ | ✓ | ✓ | | audio concealment ratio minimum | | ✓ | ✓ | ✓ | | audio concealment ratio now | | ✓ | ✓ | ✓ | | audio concealment time | | ✓ | ✓ | ✓ | | audio duration clock adjust | | ✓ | ✓ | ✓ | | audio duration early packet | | ✓ | ✓ | ✓ | | audio duration late discard | | ✓ | ✓ | ✓ | | audio duration playout decrease | | ✓ | ✓ | ✓ | | audio duration playout increase | | ✓ | ✓ | ✓ | | audio duration receive | | ✓ | ✓ | ✓ | | audio duration receive voice | | ✓ | ✓ | ✓ | | audio frame arriving times difference | | ✓ | ✓ | ✓ | | audio frame arriving times difference vari | | ✓ | ✓ | ✓ | | audio frame size | | ✓ | ✓ | ✓ | | audio frames-per-packet | | ✓ | ✓ | ✓ | | audio g107 codec baseline | | ✓ | ✓ | ✓ | | audio g107 codec baseline bpl | | ✓ | ✓ | ✓ | | audio g107 impairment | | ✓ | ✓ | ✓ | | audio g107 impairment one-way-delay | | ✓ | ✓ | ✓ | | audio g107 lossRate | | ✓ | ✓ | ✓ | | audio noise level average | | ✓ | ✓ | ✓ | | audio noise level configured | | ✓ | ✓ | ✓ | | audio noise level current | | ✓ | ✓ | ✓ | | audio noise level maximum | | ✓ | ✓ | ✓ | | audio noise level minimum | | ✓ | ✓ | ✓ | | audio packets cs | | ✓ | ✓ | ✓ | | audio packets ok | | ✓ | ✓ | ✓ | | audio packets rtp | | ✓ | ✓ | ✓ | | audio packets scs | | ✓ | ✓ | ✓ | | audio packets silence | | ✓ | ✓ | ✓ | | audio rtp fwd out-of-sequence sum | | ✓ | ✓ | ✓ | | audio rtp jitter ticks | | ✓ | ✓ | ✓ | | audio rtp packets expected | | ✓ | ✓ | ✓ | | audio rtp packets lost | | ✓ | ✓ | ✓ | | audio rtp seconds concealed | | ✓ | ✓ | ✓ | | audio rtp seconds concealed severe | | ✓ | ✓ | ✓ | | audio rtp seconds ok | | ✓ | ✓ | ✓ | | audio snr average | | ✓ | ✓ | ✓ | | audio snr configured | | ✓ | ✓ | ✓ | | audio snr current | | ✓ | ✓ | ✓ | | audio snr maximum | | ✓ | ✓ | ✓ | | audio snr minimum | | ✓ | ✓ | ✓ | | audio speech time | | ✓ | ✓ | ✓ | | AVCSubApplicationValue | | ✓ | ✓ | ✓ | | bandwidth used | | ✓ | ✓ | ✓ | | bandwidth used percentage | | ✓ | ✓ | ✓ | | bgp community | | ✓ | ✓ | ✓ | | bgp prepend | | ✓ | ✓ | ✓ | | bw fee | | ✓ | ✓ | ✓ | | bw percentage | | ✓ | ✓ | ✓ | | BYTE\_RATE | | ✓ | ✓ | ✓ | | c3pl class cce-id | | ✓ | ✓ | ✓ | | c3pl class name | | ✓ | ✓ | ✓ | | c3pl class type | | ✓ | ✓ | ✓ | | c3pl policy cce-id | | ✓ | ✓ | ✓ | | c3pl policy name | | ✓ | ✓ | ✓ | | c3pl policy type | | ✓ | ✓ | ✓ | | capacity | | ✓ | ✓ | ✓ | | client network delay average | | ✓ | ✓ | ✓ | | client throughput average | | ✓ | ✓ | ✓ | | closed sessions | | ✓ | ✓ | ✓ | | connection client counter bytes network | | ✓ | ✓ | ✓ | | connection client counter bytes retransmit | | ✓ | ✓ | ✓ | | connection client counter packets retransm | | ✓ | ✓ | ✓ | | connection client ipv4 address | | ✓ | ✓ | ✓ | | connection client ipv6 address | | ✓ | ✓ | ✓ | | connection client transport port | | ✓ | ✓ | ✓ | | connection concurrent-connections | | ✓ | ✓ | ✓ | | connection delay application max | | ✓ | ✓ | ✓ | | connection delay application min | | ✓ | ✓ | ✓ | | connection delay application sum | | ✓ | ✓ | ✓ | | connection delay network client-to-server | | ✓ | ✓ | ✓ | | connection delay network client-to-server | | ✓ | ✓ | ✓ | | connection delay network client-to-server | | ✓ | ✓ | ✓ | | connection delay network client-to-server | | ✓ | ✓ | ✓ | | connection delay network long-lived client | | ✓ | ✓ | ✓ | | connection delay network long-lived to-cli | | ✓ | ✓ | ✓ | | connection delay network long-lived to-ser | | ✓ | ✓ | ✓ | | connection delay network to-client max | | ✓ | ✓ | ✓ | | connection delay network to-client min | | ✓ | ✓ | ✓ | | connection delay network to-client num-sam | | ✓ | ✓ | ✓ | | connection delay network to-client sum | | ✓ | ✓ | ✓ | | connection delay network to-server max | | ✓ | ✓ | ✓ | | connection delay network to-server min | | ✓ | ✓ | ✓ | | connection delay network to-server num-sam | | ✓ | ✓ | ✓ | | connection delay network to-server sum | | ✓ | ✓ | ✓ | | connection delay response client-to-server | | ✓ | ✓ | ✓ | | connection delay response client-to-server | | ✓ | ✓ | ✓ | | connection delay response client-to-server | | ✓ | ✓ | ✓ | | connection delay response to-server histog | | ✓ | ✓ | ✓ | | connection delay response to-server max | | ✓ | ✓ | ✓ | | connection delay response to-server min | | ✓ | ✓ | ✓ | | connection delay response to-server sum | | ✓ | ✓ | ✓ | | connection id | | ✓ | ✓ | ✓ | | connection id long | | ✓ | ✓ | ✓ | | connection server counter bytes network | | ✓ | ✓ | ✓ | | connection server counter bytes retransmit | | ✓ | ✓ | ✓ | | connection server counter packets retransm | | ✓ | ✓ | ✓ | | connection server ipv4 address | | ✓ | ✓ | ✓ | | connection server ipv6 address | | ✓ | ✓ | ✓ | | connection server transport port | | ✓ | ✓ | ✓ | | connection transaction counter complete | | ✓ | ✓ | ✓ | | connection transaction duration max | | ✓ | ✓ | ✓ | | connection transaction duration min | | ✓ | ✓ | ✓ | | connection transaction duration sum | | ✓ | ✓ | ✓ | | counter bytes appqoe ssl-de-read | | ✓ | ✓ | ✓ | | counter bytes appqoe ssl-de-written | | ✓ | ✓ | ✓ | | counter bytes appqoe ssl-en-read | | ✓ | ✓ | ✓ | | counter bytes appqoe ssl-en-written | | ✓ | ✓ | ✓ | | counter bytes appqoe ssl-read | | ✓ | ✓ | ✓ | | counter bytes appqoe ssl-written | | ✓ | ✓ | ✓ | | counter bytes rate per-flow | | ✓ | ✓ | ✓ | | counter bytes rate per-flow max | | ✓ | ✓ | ✓ | | counter bytes rate per-flow min | | ✓ | ✓ | ✓ | | counter bytes sdwan dropped long | | ✓ | ✓ | ✓ | | counter packets appqoe fec-d-pkts | | ✓ | ✓ | ✓ | | counter packets appqoe fec-r-pkts | | ✓ | ✓ | ✓ | | counter packets appqoe pkt-dup-d-pkts-dup | | ✓ | ✓ | ✓ | | counter packets appqoe pkt-dup-d-pkts-orig | | ✓ | ✓ | ✓ | | counter packets appqoe pkt-dup-r-pkts | | ✓ | ✓ | ✓ | | counter packets dropped permanent | | ✓ | ✓ | ✓ | | counter packets rate per-flow | | ✓ | ✓ | ✓ | | counter packets rate per-flow max | | ✓ | ✓ | ✓ | | counter packets rate per-flow min | | ✓ | ✓ | ✓ | | counter packets sdwan pkt-cxp-d-pkts | | ✓ | ✓ | ✓ | | datalink event | | ✓ | ✓ | ✓ | | datalink event extended | | ✓ | ✓ | ✓ | | discard rollup count | | ✓ | ✓ | ✓ | | drop cause id | | ✓ | ✓ | ✓ | | drop cause name | | ✓ | ✓ | ✓ | | egress bw | | ✓ | ✓ | ✓ | | egress rollup bw | | ✓ | ✓ | ✓ | | EGRESS\_ACL\_ID | | ✓ | ✓ | ✓ | | end timestamp | | ✓ | ✓ | ✓ | | entrance downgrade | | ✓ | ✓ | ✓ | | ETAByteDistribution | | ✓ | ✓ | ✓ | | ETAInitialDataPacketOld | | ✓ | ✓ | ✓ | | ETASequenceofPktLengthsandTimes | | ✓ | ✓ | ✓ | | ETTA\_INITIAL\_DATA\_PACKET | | ✓ | ✓ | ✓ | | ETTA\_SEQUENCE\_OF\_APPLICATION\_LENGTHS\_AND\_TIMES | | ✓ | ✓ | ✓ | | ETTA\_SEQUENCE\_OF\_PACKET\_LENGTHS\_AND\_TIMES | | ✓ | ✓ | ✓ | | ETTA\_TLS\_CIPHER\_SUITES | | ✓ | ✓ | ✓ | | ETTA\_TLS\_EXTENSION\_LENGTHS | | ✓ | ✓ | ✓ | | ETTA\_TLS\_EXTENSION\_TYPES | | ✓ | ✓ | ✓ | | ETTA\_TLS\_EXTENSIONS | | ✓ | ✓ | ✓ | | ETTA\_TLS\_KEY\_LENGTH | | ✓ | ✓ | ✓ | | ETTA\_TLS\_RANDOM | | ✓ | ✓ | ✓ | | ETTA\_TLS\_RECORDS | | ✓ | ✓ | ✓ | | ETTA\_TLS\_SESSION\_ID | | ✓ | ✓ | ✓ | | ETTA\_TLS\_VERSION | | ✓ | ✓ | ✓ | | flow cts switch derived-sgt | | ✓ | ✓ | ✓ | | flow left time | | ✓ | ✓ | ✓ | | FW\_BLACKOUT\_SECS | | ✓ | ✓ | ✓ | | FW\_CONFIGURED\_VALUE | | ✓ | ✓ | ✓ | | FW\_ERM\_EXT\_EVENT | | ✓ | ✓ | ✓ | | FW\_ERM\_EXT\_EVENT\_DESC | | ✓ | ✓ | ✓ | | FW\_EVENT | | ✓ | ✓ | ✓ | | FW\_EVENT\_LEVEL | | ✓ | ✓ | ✓ | | FW\_EVENT\_LEVEL\_ID | | ✓ | ✓ | ✓ | | FW\_EXT\_EVENT | | ✓ | ✓ | ✓ | | FW\_EXT\_EVENT | | ✓ | ✓ | ✓ | | FW\_EXT\_EVENT\_DESC | | ✓ | ✓ | ✓ | | FW\_HALFOPEN\_CNT | | ✓ | ✓ | ✓ | | FW\_HALFOPEN\_HIGH | | ✓ | ✓ | ✓ | | FW\_HALFOPEN\_RATE | | ✓ | ✓ | ✓ | | FW\_MAX\_SESSIONS | | ✓ | ✓ | ✓ | | FW\_SUMMARY\_PKT\_CNT | | ✓ | ✓ | ✓ | | FW\_ZONEPAIR\_ID | | ✓ | ✓ | ✓ | | FW\_ZONEPAIR\_NAME | | ✓ | ✓ | ✓ | | ingress bw | | ✓ | ✓ | ✓ | | ingress rollup bw | | ✓ | ✓ | ✓ | | INGRESS\_ACL\_ID | | ✓ | ✓ | ✓ | | interface input fex-node-id | | ✓ | ✓ | ✓ | | interface output fex-node-id | | ✓ | ✓ | ✓ | | interface power | | ✓ | ✓ | ✓ | | iOAM Application metadata | | ✓ | ✓ | ✓ | | IOAM byte count | | ✓ | ✓ | ✓ | | IOAM cs0 byte count | | ✓ | ✓ | ✓ | | IOAM cs0 packet counter | | ✓ | ✓ | ✓ | | IOAM cs1 byte count | | ✓ | ✓ | ✓ | | IOAM cs1 packet counter | | ✓ | ✓ | ✓ | | IOAM cs2 byte count | | ✓ | ✓ | ✓ | | IOAM cs2 packet counter | | ✓ | ✓ | ✓ | | IOAM cs3 byte count | | ✓ | ✓ | ✓ | | IOAM cs3 packet counter | | ✓ | ✓ | ✓ | | IOAM cs4 byte count | | ✓ | ✓ | ✓ | | IOAM cs4 packet counter | | ✓ | ✓ | ✓ | | IOAM cs5 byte count | | ✓ | ✓ | ✓ | | IOAM cs5 packet counter | | ✓ | ✓ | ✓ | | IOAM cs6 byte count | | ✓ | ✓ | ✓ | | IOAM cs6 packet counter | | ✓ | ✓ | ✓ | | IOAM cs7 byte count | | ✓ | ✓ | ✓ | | IOAM cs7 packet counter | | ✓ | ✓ | ✓ | | IOAM duplicate packet counter | | ✓ | ✓ | ✓ | | iOAM E2E Header | | ✓ | ✓ | ✓ | | IOAM highest PPC sequence number | | ✓ | ✓ | ✓ | | IOAM lost packet counter | | ✓ | ✓ | ✓ | | iOAM my node name | | ✓ | ✓ | ✓ | | iOAM my node-id | | ✓ | ✓ | ✓ | | iOAM node-id | | ✓ | ✓ | ✓ | | iOAM node1 eif id | | ✓ | ✓ | ✓ | | iOAM node1 id | | ✓ | ✓ | ✓ | | iOAM node1 in if id | | ✓ | ✓ | ✓ | | iOAM node2 eif id | | ✓ | ✓ | ✓ | | iOAM node2 id | | ✓ | ✓ | ✓ | | iOAM node2 in if id | | ✓ | ✓ | ✓ | | iOAM node3 eif id | | ✓ | ✓ | ✓ | | iOAM node3 id | | ✓ | ✓ | ✓ | | iOAM node3 in if id | | ✓ | ✓ | ✓ | | iOAM node4 eif id | | ✓ | ✓ | ✓ | | iOAM node4 id | | ✓ | ✓ | ✓ | | iOAM node4 in if id | | ✓ | ✓ | ✓ | | iOAM number of nodes | | ✓ | ✓ | ✓ | | IOAM packet counter | | ✓ | ✓ | ✓ | | iOAM Path Map | | ✓ | ✓ | ✓ | | IOAM reordered packet counter | | ✓ | ✓ | ✓ | | iOAM sfc invalidated count | | ✓ | ✓ | ✓ | | iOAM sfc validated count | | ✓ | ✓ | ✓ | | iOAM sfc-id | | ✓ | ✓ | ✓ | | IPv4 destination observation node | | ✓ | ✓ | ✓ | | IPv4 source observation node | | ✓ | ✓ | ✓ | | IPv6 destination observation node | | ✓ | ✓ | ✓ | | ipv6 protocol filed | | ✓ | ✓ | ✓ | | IPv6 source observation node | | ✓ | ✓ | ✓ | | kth rollup bw | | ✓ | ✓ | ✓ | | l4r event | | ✓ | ✓ | ✓ | | l4r event timestamp | | ✓ | ✓ | ✓ | | l4r server ipv4 address | | ✓ | ✓ | ✓ | | l4r server ipv6 address | | ✓ | ✓ | ✓ | | l4r server transport port | | ✓ | ✓ | ✓ | | link group name | | ✓ | ✓ | ✓ | | long-term round-trip-time | | ✓ | ✓ | ✓ | | max egress bw | | ✓ | ✓ | ✓ | | max ingress bw | | ✓ | ✓ | ✓ | | metadata clock-rate | | ✓ | ✓ | ✓ | | metadata global-session-id | | ✓ | ✓ | ✓ | | metadata multi-party-session-id | | ✓ | ✓ | ✓ | | misc unsupported | | ✓ | ✓ | ✓ | | monitor device-type | | ✓ | ✓ | ✓ | | monitor event | | ✓ | ✓ | ✓ | | mos below | | ✓ | ✓ | ✓ | | mos quality | | ✓ | ✓ | ✓ | | mos total count | | ✓ | ✓ | ✓ | | mos worst 100 | | ✓ | ✓ | ✓ | | network delay sample | | ✓ | ✓ | ✓ | | network delay sum | | ✓ | ✓ | ✓ | | NETWORK\_DELAY\_AVG network delay average | | ✓ | ✓ | ✓ | | nvzFlowCoordinatesList | | ✓ | ✓ | ✓ | | nvzFlowDestinationHostname | | ✓ | ✓ | ✓ | | nvzFlowDNSSuffix | | ✓ | ✓ | ✓ | | nvzFlowInterfaceDetailsList | | ✓ | ✓ | ✓ | | nvzFlowInterfaceIndex | | ✓ | ✓ | ✓ | | nvzFlowInterfaceInfoUID | | ✓ | ✓ | ✓ | | nvzFlowInterfaceMac | | ✓ | ✓ | ✓ | | nvzFlowInterfaceName | | ✓ | ✓ | ✓ | | nvzFlowInterfaceType | | ✓ | ✓ | ✓ | | nvzFlowL4ByteCountIn | | ✓ | ✓ | ✓ | | nvzFlowL4ByteCountOut | | ✓ | ✓ | ✓ | | nvzFlowLoggedInUser | | ✓ | ✓ | ✓ | | nvzFlowModuleHashList | | ✓ | ✓ | ✓ | | nvzFlowModuleNameList | | ✓ | ✓ | ✓ | | nvzFlowOSEdition | | ✓ | ✓ | ✓ | | nvzFlowOSName | | ✓ | ✓ | ✓ | | nvzFlowOSVersion | | ✓ | ✓ | ✓ | | nvzFlowParentProcessAccount | | ✓ | ✓ | ✓ | | nvzFlowParentProcessAccountType | | ✓ | ✓ | ✓ | | nvzFlowParentProcessHash | | ✓ | ✓ | ✓ | | nvzFlowParentProcessName | | ✓ | ✓ | ✓ | | nvzFlowProcessAccount | | ✓ | ✓ | ✓ | | nvzFlowProcessAccountType | | ✓ | ✓ | ✓ | | nvzFlowProcessHash | | ✓ | ✓ | ✓ | | nvzFlowProcessName | | ✓ | ✓ | ✓ | | nvzFlowSystemManufacturer | | ✓ | ✓ | ✓ | | nvzFlowSystemType | | ✓ | ✓ | ✓ | | nvzFlowUDID | | ✓ | ✓ | ✓ | | nvzFlowUserAccountType | | ✓ | ✓ | ✓ | | ONE\_WAY\_DELAY pfr one-way-delay | | ✓ | ✓ | ✓ | | overlay session id input | | ✓ | ✓ | ✓ | | overlay session id output | | ✓ | ✓ | ✓ | | packet arrival timestamp | | ✓ | ✓ | ✓ | | PACKET\_RATE | | ✓ | ✓ | ✓ | | PACKETS\_DROPPED | | ✓ | ✓ | ✓ | | pbhk event | | ✓ | ✓ | ✓ | | pbhk event timestamp | | ✓ | ✓ | ✓ | | pbhk mapped ipv4 address | | ✓ | ✓ | ✓ | | pbhk mapped transport port | | ✓ | ✓ | ✓ | | pfr br ipv4 address | | ✓ | ✓ | ✓ | | pfr counter event error traffic-class miti | | ✓ | ✓ | ✓ | | pfr counter event error traffic-class miti | | ✓ | ✓ | ✓ | | pfr counter event error traffic-class miti | | ✓ | ✓ | ✓ | | pfr label identifier | | ✓ | ✓ | ✓ | | pfr one-way-delay samples | | ✓ | ✓ | ✓ | | pfr one-way-delay sum | | ✓ | ✓ | ✓ | | pfr priority | | ✓ | ✓ | ✓ | | pfr service provider tag identifier | | ✓ | ✓ | ✓ | | pfr site destination id ipv4 | | ✓ | ✓ | ✓ | | pfr site destination prefix ipv4 | | ✓ | ✓ | ✓ | | pfr site destination prefix ipv6 | | ✓ | ✓ | ✓ | | pfr site destination prefix mask ipv4 | | ✓ | ✓ | ✓ | | pfr site destination prefix mask ipv6 | | ✓ | ✓ | ✓ | | pfr site source id ipv4 | | ✓ | ✓ | ✓ | | pfr site source prefix ipv4 | | ✓ | ✓ | ✓ | | pfr site source prefix ipv6 | | ✓ | ✓ | ✓ | | pfr site source prefix mask ipv4 | | ✓ | ✓ | ✓ | | pfr site source prefix mask ipv6 | | ✓ | ✓ | ✓ | | pfr status | | ✓ | ✓ | ✓ | | policy qos classification hierarchy | | ✓ | ✓ | ✓ | | policy qos queue drops | | ✓ | ✓ | ✓ | | policy qos queue index | | ✓ | ✓ | ✓ | | reason id | | ✓ | ✓ | ✓ | | refused sessions | | ✓ | ✓ | ✓ | | retransmitted packets | | ✓ | ✓ | ✓ | | routing vrf service | | ✓ | ✓ | ✓ | | rsvp bw pool | | ✓ | ✓ | ✓ | | scAccessString | | ✓ | ✓ | ✓ | | scActiveSubscribers | | ✓ | ✓ | ✓ | | scAttackId | | ✓ | ✓ | ✓ | | scAttackIp | | ✓ | ✓ | ✓ | | scAttackIpProtocol | | ✓ | ✓ | ✓ | | scAttackMaliciousSessions | | ✓ | ✓ | ✓ | | scAttackOtherIp | | ✓ | ✓ | ✓ | | scAttackPortNumber | | ✓ | ✓ | ✓ | | scAttacks | | ✓ | ✓ | ✓ | | scAttackSide | | ✓ | ✓ | ✓ | | scAttackType | | ✓ | ✓ | ✓ | | scBreachState | | ✓ | ✓ | ✓ | | scClientPort | | ✓ | ✓ | ✓ | | scConcurrentSessions | | ✓ | ✓ | ✓ | | scConfiguredDuration | | ✓ | ✓ | ✓ | | scDestinationIpSample | | ✓ | ✓ | ✓ | | scDownstreamVolume | | ✓ | ✓ | ✓ | | scDuration | | ✓ | ✓ | ✓ | | scEndTime | | ✓ | ✓ | ✓ | | scFlavorId | | ✓ | ✓ | ✓ | | scFlowCloseMode | | ✓ | ✓ | ✓ | | scFlowContextId | | ✓ | ✓ | ✓ | | scGeneratorId | | ✓ | ✓ | ✓ | | scInfoString | | ✓ | ✓ | ✓ | | scInitiatingSide | | ✓ | ✓ | ✓ | | scLinkId | | ✓ | ✓ | ✓ | | scPackageCounterId | | ✓ | ✓ | ✓ | | scPackageId | | ✓ | ✓ | ✓ | | scProtocolId | | ✓ | ✓ | ✓ | | scProtocolSignature | | ✓ | ✓ | ✓ | | scReason | | ✓ | ✓ | ✓ | | scReportTime | | ✓ | ✓ | ✓ | | scSeconds | | ✓ | ✓ | ✓ | | scServerPort | | ✓ | ✓ | ✓ | | scServiceGlobalCounterId | | ✓ | ✓ | ✓ | | scServiceId | | ✓ | ✓ | ✓ | | scServiceUsageCounterId | | ✓ | ✓ | ✓ | | scSessionDownstreamVolume | | ✓ | ✓ | ✓ | | scSessions | | ✓ | ✓ | ✓ | | scSessionUpstreamVolume | | ✓ | ✓ | ✓ | | scSkipppedSessions | | ✓ | ✓ | ✓ | | scSourceIpSample | | ✓ | ✓ | ✓ | | scSubscriberCounterId | | ✓ | ✓ | ✓ | | scSubscriberId | | ✓ | ✓ | ✓ | | scTag | | ✓ | ✓ | ✓ | | scTimeFrame | | ✓ | ✓ | ✓ | | scTotalActiveSubscribers | | ✓ | ✓ | ✓ | | scTrafficProcessorId | | ✓ | ✓ | ✓ | | scTransactionDurationMillisec | | ✓ | ✓ | ✓ | | scUpstreamVolume | | ✓ | ✓ | ✓ | | scZoneId | | ✓ | ✓ | ✓ | | sdwan preferred-color-not-met | | ✓ | ✓ | ✓ | | sdwan qos-queue-id | | ✓ | ✓ | ✓ | | sdwan sla-not-met | | ✓ | ✓ | ✓ | | server network delay average | | ✓ | ✓ | ✓ | | server response time average | | ✓ | ✓ | ✓ | | services pfr class-tag-id | | ✓ | ✓ | ✓ | | services pfr mc-id | | ✓ | ✓ | ✓ | | services waas passthrough-reason | | ✓ | ✓ | ✓ | | services waas segment | | ✓ | ✓ | ✓ | | session time average | | ✓ | ✓ | ✓ | | session time maximum | | ✓ | ✓ | ✓ | | session time minimum | | ✓ | ✓ | ✓ | | SGT\_DESTINATION\_NAME | | ✓ | ✓ | ✓ | | SGT\_DESTINATION\_TAG | | ✓ | ✓ | ✓ | | SGT\_SOURCE\_NAME | | ✓ | ✓ | ✓ | | SGT\_SOURCE\_TAG | | ✓ | ✓ | ✓ | | sip header from uri host ip addr | | ✓ | ✓ | ✓ | | sip header from uri userinfo user | | ✓ | ✓ | ✓ | | sip header to uri host ip addr | | ✓ | ✓ | ✓ | | sip header to uri userinfo user | | ✓ | ✓ | ✓ | | sip sess duration | | ✓ | ✓ | ✓ | | sip sess end\_reason | | ✓ | ✓ | ✓ | | sip sess\_connected | | ✓ | ✓ | ✓ | | sip sess\_dialed | | ✓ | ✓ | ✓ | | sip sess\_failed | | ✓ | ✓ | ✓ | | start timestamp | | ✓ | ✓ | ✓ | | tcpWindowSizeSum | | ✓ | ✓ | ✓ | | threshold | | ✓ | ✓ | ✓ | | timestamp interval | | ✓ | ✓ | ✓ | | timestampAbsoluteMonitoring-intervalEnd | | ✓ | ✓ | ✓ | | timestampAbsoluteMonitoring-intervalStart | | ✓ | ✓ | ✓ | | tloc local color | | ✓ | ✓ | ✓ | | tloc local system ip address | | ✓ | ✓ | ✓ | | tloc remote color | | ✓ | ✓ | ✓ | | tloc remote system ip address | | ✓ | ✓ | ✓ | | tloc table overlay session id | | ✓ | ✓ | ✓ | | tloc tunnel protocol | | ✓ | ✓ | ✓ | | transaction time average | | ✓ | ✓ | ✓ | | transport bytes expected | | ✓ | ✓ | ✓ | | transport bytes lost | | ✓ | ✓ | ✓ | | transport bytes lost rate | | ✓ | ✓ | ✓ | | transport bytes out-of-order | | ✓ | ✓ | ✓ | | transport destination-port max | | ✓ | ✓ | ✓ | | transport destination-port min | | ✓ | ✓ | ✓ | | transport event packet-loss counter | | ✓ | ✓ | ✓ | | transport event packet-loss counter max | | ✓ | ✓ | ✓ | | transport event packet-loss counter min | | ✓ | ✓ | ✓ | | transport event packet-loss counter perman | | ✓ | ✓ | ✓ | | transport packets expected counter | | ✓ | ✓ | ✓ | | transport packets expected counter permane | | ✓ | ✓ | ✓ | | transport packets lost counter | | ✓ | ✓ | ✓ | | transport packets lost counter max | | ✓ | ✓ | ✓ | | transport packets lost counter min | | ✓ | ✓ | ✓ | | transport packets lost counter permanent | | ✓ | ✓ | ✓ | | transport packets lost rate | | ✓ | ✓ | ✓ | | transport packets lost rate max | | ✓ | ✓ | ✓ | | transport packets lost rate min | | ✓ | ✓ | ✓ | | transport packets out-of-order | | ✓ | ✓ | ✓ | | transport round-trip-time | | ✓ | ✓ | ✓ | | transport round-trip-time max | | ✓ | ✓ | ✓ | | transport round-trip-time min | | ✓ | ✓ | ✓ | | transport round-trip-time samples | | ✓ | ✓ | ✓ | | transport round-trip-time sum | | ✓ | ✓ | ✓ | | transport rtp flow count | | ✓ | ✓ | ✓ | | transport rtp jitter inter arrival mean | | ✓ | ✓ | ✓ | | transport rtp jitter inter arrival samples | | ✓ | ✓ | ✓ | | transport rtp jitter inter arrival sum | | ✓ | ✓ | ✓ | | transport rtp jitter maximum | | ✓ | ✓ | ✓ | | transport rtp jitter mean | | ✓ | ✓ | ✓ | | transport rtp jitter mean sum | | ✓ | ✓ | ✓ | | transport rtp jitter minimum | | ✓ | ✓ | ✓ | | transport rtp payload-type | | ✓ | ✓ | ✓ | | transport rtp sequence-number | | ✓ | ✓ | ✓ | | transport rtp sequence-number last | | ✓ | ✓ | ✓ | | transport rtp ssrc | | ✓ | ✓ | ✓ | | transport source-port max | | ✓ | ✓ | ✓ | | transport source-port min | | ✓ | ✓ | ✓ | | transport tcp flow count | | ✓ | ✓ | ✓ | | transport tcp maximum-segment-size | | ✓ | ✓ | ✓ | | transport tcp window-size average | | ✓ | ✓ | ✓ | | transport tcp window-size average sum | | ✓ | ✓ | ✓ | | transport tcp window-size maximum | | ✓ | ✓ | ✓ | | transport tcp window-size minimum | | ✓ | ✓ | ✓ | | transport tcp window-size sum | | ✓ | ✓ | ✓ | | unresponsive sessions | | ✓ | ✓ | ✓ | | vxlan flags | | ✓ | ✓ | ✓ | | vxlan sgt | | ✓ | ✓ | ✓ | | vxlan vtep input | | ✓ | ✓ | ✓ | | vxlan vtep output | | ✓ | ✓ | ✓ | | waas application | | ✓ | ✓ | ✓ | | waas bytes input | | ✓ | ✓ | ✓ | | waas bytes output | | ✓ | ✓ | ✓ | | waas class | | ✓ | ✓ | ✓ | | waas connection mode | | ✓ | ✓ | ✓ | | waas dre input | | ✓ | ✓ | ✓ | | waas dre output | | ✓ | ✓ | ✓ | | waas lz input | | ✓ | ✓ | ✓ | | waas lz output | | ✓ | ✓ | ✓ | | waas optimised bytes | | ✓ | ✓ | ✓ | | waas original bytes | | ✓ | ✓ | ✓ | | wireless afd accept bytes | | ✓ | ✓ | ✓ | | wireless afd accept packets | | ✓ | ✓ | ✓ | | wireless afd drop bytes | | ✓ | ✓ | ✓ | | wireless afd drop packets | | ✓ | ✓ | ✓ | | wlan\_id | | ✓ | ✓ | ✓ | | XLATE\_DST\_ADDR\_IPV4 | | ✓ | ✓ | ✓ | | XLATE\_DST\_PORT | | ✓ | ✓ | ✓ | | XLATE\_SRC\_ADDR\_IPV4 | | ✓ | ✓ | ✓ | | XLATE\_SRC\_PORT | | ✓ | ✓ | ✓ | #### Ericsson (PEN: 193) | Name | Community | Basic | Standard | Premium | | --------------------------------------- | :-------: | :---: | :------: | :-----: | | NAT\_LOG\_FIELD\_IDX\_ASSIGN\_TS\_SEC | | ✓ | ✓ | ✓ | | NAT\_LOG\_FIELD\_IDX\_CONTEXT\_ID | | ✓ | ✓ | ✓ | | NAT\_LOG\_FIELD\_IDX\_CONTEXT\_NAME | | ✓ | ✓ | ✓ | | NAT\_LOG\_FIELD\_IDX\_EXT\_PORT\_FIRST | | ✓ | ✓ | ✓ | | NAT\_LOG\_FIELD\_IDX\_EXT\_PORT\_LAST | | ✓ | ✓ | ✓ | | NAT\_LOG\_FIELD\_IDX\_IPV4\_EXT\_ADDR | | ✓ | ✓ | ✓ | | NAT\_LOG\_FIELD\_IDX\_IPV4\_INT\_ADDR | | ✓ | ✓ | ✓ | | NAT\_LOG\_FIELD\_IDX\_UNASSIGN\_TS\_SEC | | ✓ | ✓ | ✓ | #### StreamCORE (PEN: 4056) | Name | Community | Basic | Standard | Premium | | ---------------------- | :-------: | :---: | :------: | :-----: | | call\_direction | | ✓ | ✓ | ✓ | | codec\_in | | ✓ | ✓ | ✓ | | codec\_out | | ✓ | ✓ | ✓ | | hostname | | ✓ | ✓ | ✓ | | id\_rule\_1 | | ✓ | ✓ | ✓ | | id\_rule\_10 | | ✓ | ✓ | ✓ | | id\_rule\_2 | | ✓ | ✓ | ✓ | | id\_rule\_3 | | ✓ | ✓ | ✓ | | id\_rule\_4 | | ✓ | ✓ | ✓ | | id\_rule\_5 | | ✓ | ✓ | ✓ | | id\_rule\_6 | | ✓ | ✓ | ✓ | | id\_rule\_7 | | ✓ | ✓ | ✓ | | id\_rule\_8 | | ✓ | ✓ | ✓ | | id\_rule\_9 | | ✓ | ✓ | ✓ | | mos\_lq | | ✓ | ✓ | ✓ | | net\_app\_resp\_time | | ✓ | ✓ | ✓ | | net\_delay | | ✓ | ✓ | ✓ | | net\_discard | | ✓ | ✓ | ✓ | | net\_jitter | | ✓ | ✓ | ✓ | | net\_loss | | ✓ | ✓ | ✓ | | rtp\_clockrate\_in | | ✓ | ✓ | ✓ | | rtp\_clockrate\_out | | ✓ | ✓ | ✓ | | ssl\_cn | | ✓ | ✓ | ✓ | | ssl\_org | | ✓ | ✓ | ✓ | | tcp\_retrans\_rate | | ✓ | ✓ | ✓ | | total\_app\_resp\_time | | ✓ | ✓ | ✓ | | url | | ✓ | ✓ | ✓ | | wan\_rtt | | ✓ | ✓ | ✓ | #### Riverbed (PEN: 4321) | Name | Community | Basic | Standard | Premium | | ------------------------ | :-------: | :---: | :------: | :-----: | | CFE in-path IP Address | | ✓ | ✓ | ✓ | | CFE TCP Port | | ✓ | ✓ | ✓ | | FE Type | | ✓ | ✓ | ✓ | | Outer in-path IP Address | | ✓ | ✓ | ✓ | | Outer TCP Port | | ✓ | ✓ | ✓ | | Pass-through Reason | | ✓ | ✓ | ✓ | | Retransmitted Bytes | | ✓ | ✓ | ✓ | | Retransmitted Packets | | ✓ | ✓ | ✓ | | SFE in-path IP Address | | ✓ | ✓ | ✓ | | SFE TCP Port | | ✓ | ✓ | ✓ | | TCP Connection RTT | | ✓ | ✓ | ✓ | | WAN Visibility mode | | ✓ | ✓ | ✓ | #### LANcope, now Cisco (PEN: 8712) | Name | Community | Basic | Standard | Premium | | ------------------------------------- | :-------: | :---: | :------: | :-----: | | EndpointFlowParentProcessAccount | | ✓ | ✓ | ✓ | | EndpointFlowParentProcessHash | | ✓ | ✓ | ✓ | | EndpointFlowParentProcessName | | ✓ | ✓ | ✓ | | EndpointFlowProcessAccount | | ✓ | ✓ | ✓ | | EndpointFlowProcessHash | | ✓ | ✓ | ✓ | | EndpointFlowProcessName | | ✓ | ✓ | ✓ | | FlowSensorApplicationDetails | | ✓ | ✓ | ✓ | | FlowSensorApplicationIdentifier | | ✓ | ✓ | ✓ | | FlowSensorBadFlagBadRST | | ✓ | ✓ | ✓ | | FlowSensorBadFlagNoACK | | ✓ | ✓ | ✓ | | FlowSensorBadFlagNoFlag | | ✓ | ✓ | ✓ | | FlowSensorBadFlagSYNFIN | | ✓ | ✓ | ✓ | | FlowSensorBadFlagURG | | ✓ | ✓ | ✓ | | FlowSensorBadFlagXmas | | ✓ | ✓ | ✓ | | FlowSensorDestinationEmailIn | | ✓ | ✓ | ✓ | | FlowSensorDestinationEmailInMessages | | ✓ | ✓ | ✓ | | FlowSensorDestinationEmailInTrys | | ✓ | ✓ | ✓ | | FlowSensorDestinationEmailOut | | ✓ | ✓ | ✓ | | FlowSensorDestinationEmailOutMessages | | ✓ | ✓ | ✓ | | FlowSensorDestinationEmailOutTrys | | ✓ | ✓ | ✓ | | FlowSensorEmbeddedICMPCode | | ✓ | ✓ | ✓ | | FlowSensorEmbeddedICMPProtocol | | ✓ | ✓ | ✓ | | FlowSensorEmbeddedICMPType | | ✓ | ✓ | ✓ | | FlowSensorFragPacketDifferentSizes | | ✓ | ✓ | ✓ | | FlowSensorFragPacketTooLong | | ✓ | ✓ | ✓ | | FlowSensorFragPacketTooShort | | ✓ | ✓ | ✓ | | FlowSensorInitiator | | ✓ | ✓ | ✓ | | FlowSensorRetransmits | | ✓ | ✓ | ✓ | | FlowSensorRoundTripTime | | ✓ | ✓ | ✓ | | FlowSensorServerResponseTime | | ✓ | ✓ | ✓ | | FlowSensorShortFragAttack | | ✓ | ✓ | ✓ | | FlowSensorSourceEmailIn | | ✓ | ✓ | ✓ | | FlowSensorSourceEmailInMessages | | ✓ | ✓ | ✓ | | FlowSensorSourceEmailInTrys | | ✓ | ✓ | ✓ | | FlowSensorSourceEmailOut | | ✓ | ✓ | ✓ | | FlowSensorSourceEmailOutMessages | | ✓ | ✓ | ✓ | | FlowSensorSourceEmailOutTrys | | ✓ | ✓ | ✓ | | FlowSensorTCPBadTotalCount | | ✓ | ✓ | ✓ | | FlowSensorTCPFragTotalCount | | ✓ | ✓ | ✓ | | FlowSensorTCPSRSTotalCount | | ✓ | ✓ | ✓ | | FlowSensorTCPSYNACKTotalCount | | ✓ | ✓ | ✓ | | FlowSensorTraces | | ✓ | ✓ | ✓ | | FlowSensorTrustsecSourceIdentifier | | ✓ | ✓ | ✓ | #### Palo Alto (PEN: 25461) | Name | Community | Basic | Standard | Premium | | ------- | :-------: | :---: | :------: | :-----: | | App-ID | | ✓ | ✓ | ✓ | | User-ID | | ✓ | ✓ | ✓ | #### FastIP/Boundary (PEN: 33610) | Name | Community | Basic | Standard | Premium | | ------------------------------------- | :-------: | :---: | :------: | :-----: | | APP\_RTT\_USEC | | ✓ | ✓ | ✓ | | BOND\_INTERFACE\_ID | | ✓ | ✓ | ✓ | | BOND\_INTERFACE\_MODE | | ✓ | ✓ | ✓ | | BOND\_INTERFACE\_PHYSICAL\_NIC\_COUNT | | ✓ | ✓ | ✓ | | COLLISIONS | | ✓ | ✓ | ✓ | | EPOCH\_SECOND | | ✓ | ✓ | ✓ | | ERRORS | | ✓ | ✓ | ✓ | | METER\_OS\_DISTRIBUTION\_NAME | | ✓ | ✓ | ✓ | | METER\_OS\_MACHINE | | ✓ | ✓ | ✓ | | METER\_OS\_NODENAME | | ✓ | ✓ | ✓ | | METER\_OS\_RELEASE | | ✓ | ✓ | ✓ | | METER\_OS\_SYSNAME | | ✓ | ✓ | ✓ | | METER\_OS\_VERSION | | ✓ | ✓ | ✓ | | METER\_VERSION | | ✓ | ✓ | ✓ | | NIC\_DRIVER\_NAME | | ✓ | ✓ | ✓ | | NIC\_DRIVER\_VERSION | | ✓ | ✓ | ✓ | | NIC\_FIRMWARE\_VERSION | | ✓ | ✓ | ✓ | | NIC\_ID | | ✓ | ✓ | ✓ | | NIC\_IP | | ✓ | ✓ | ✓ | | NIC\_MAC | | ✓ | ✓ | ✓ | | NIC\_NAME | | ✓ | ✓ | ✓ | | TCP\_FLAGS | | ✓ | ✓ | ✓ | | TCP\_HANDSHAKE\_RTT\_USEC | | ✓ | ✓ | ✓ | #### ntop (PEN: 35632) | Name | Community | Basic | Standard | Premium | | ----------------------------------- | :-------: | :---: | :------: | :-----: | | APPL\_LATENCY\_MS | | ✓ | ✓ | ✓ | | APPLICATION\_NAME | | ✓ | ✓ | ✓ | | BITTORRENT\_HASH | | ✓ | ✓ | ✓ | | CLIENT\_NW\_LATENCY\_MS | | ✓ | ✓ | ✓ | | CLIENT\_TCP\_FLAGS | | ✓ | ✓ | ✓ | | CUMULATIVE\_ICMP\_TYPE | | ✓ | ✓ | ✓ | | DHCP\_CLIENT\_IP | | ✓ | ✓ | ✓ | | DHCP\_CLIENT\_MAC | | ✓ | ✓ | ✓ | | DHCP\_CLIENT\_NAME | | ✓ | ✓ | ✓ | | DHCP\_MESSAGE\_TYPE | | ✓ | ✓ | ✓ | | DHCP\_REMOTE\_ID | | ✓ | ✓ | ✓ | | DHCP\_SUBSCRIBER\_ID | | ✓ | ✓ | ✓ | | DIAMETER\_CALLED\_PARTY\_ADDRESS | | ✓ | ✓ | ✓ | | DIAMETER\_CALLED\_STATION\_ID | | ✓ | ✓ | ✓ | | DIAMETER\_CALLING\_PARTY\_ADDRESS | | ✓ | ✓ | ✓ | | DIAMETER\_CALLING\_STATION\_ID | | ✓ | ✓ | ✓ | | DIAMETER\_CLR\_CANCEL\_TYPE | | ✓ | ✓ | ✓ | | DIAMETER\_CLR\_FLAGS | | ✓ | ✓ | ✓ | | DIAMETER\_EXP\_RES\_RESULT\_CODE | | ✓ | ✓ | ✓ | | DIAMETER\_EXP\_RES\_VENDOR\_ID | | ✓ | ✓ | ✓ | | DIAMETER\_FRAMED\_IP\_ADDR | | ✓ | ✓ | ✓ | | DIAMETER\_HOP\_BY\_HOP\_ID | | ✓ | ✓ | ✓ | | DIAMETER\_PDP\_ADDR | | ✓ | ✓ | ✓ | | DIAMETER\_REQ\_MSG\_TYPE | | ✓ | ✓ | ✓ | | DIAMETER\_REQ\_ORIGIN\_HOST | | ✓ | ✓ | ✓ | | DIAMETER\_REQ\_USER\_NAME | | ✓ | ✓ | ✓ | | DIAMETER\_RSP\_MSG\_TYPE | | ✓ | ✓ | ✓ | | DIAMETER\_RSP\_ORIGIN\_HOST | | ✓ | ✓ | ✓ | | DIAMETER\_RSP\_RESULT\_CODE | | ✓ | ✓ | ✓ | | DIAMETER\_SERVED\_IP\_ADDR | | ✓ | ✓ | ✓ | | DIAMETER\_SUBSCRIPTION\_ID | | ✓ | ✓ | ✓ | | DICOM\_DEVICE\_SERIAL | | ✓ | ✓ | ✓ | | DICOM\_IMPL\_UID | | ✓ | ✓ | ✓ | | DICOM\_IMPL\_VERSION | | ✓ | ✓ | ✓ | | DICOM\_INST\_ADDR | | ✓ | ✓ | ✓ | | DICOM\_INST\_NAME | | ✓ | ✓ | ✓ | | DICOM\_MANUFACTURER | | ✓ | ✓ | ✓ | | DICOM\_MODALITY | | ✓ | ✓ | ✓ | | DICOM\_STATION\_NAME | | ✓ | ✓ | ✓ | | DICOM\_SW\_VERSION | | ✓ | ✓ | ✓ | | DNS\_NUM\_ANSWERS | | ✓ | ✓ | ✓ | | DNS\_QUERY | | ✓ | ✓ | ✓ | | DNS\_QUERY\_ID | | ✓ | ✓ | ✓ | | DNS\_QUERY\_TYPE | | ✓ | ✓ | ✓ | | DNS\_RESPONSE | | ✓ | ✓ | ✓ | | DNS\_RET\_CODE | | ✓ | ✓ | ✓ | | DNS\_TTL\_ANSWER | | ✓ | ✓ | ✓ | | DOWNSTREAM\_SESSION\_ID | | ✓ | ✓ | ✓ | | DOWNSTREAM\_TUNNEL\_ID | | ✓ | ✓ | ✓ | | DST\_AS\_MAP | | ✓ | ✓ | ✓ | | DST\_AS\_PATH\_1 | | ✓ | ✓ | ✓ | | DST\_AS\_PATH\_10 | | ✓ | ✓ | ✓ | | DST\_AS\_PATH\_2 | | ✓ | ✓ | ✓ | | DST\_AS\_PATH\_3 | | ✓ | ✓ | ✓ | | DST\_AS\_PATH\_4 | | ✓ | ✓ | ✓ | | DST\_AS\_PATH\_5 | | ✓ | ✓ | ✓ | | DST\_AS\_PATH\_6 | | ✓ | ✓ | ✓ | | DST\_AS\_PATH\_7 | | ✓ | ✓ | ✓ | | DST\_AS\_PATH\_8 | | ✓ | ✓ | ✓ | | DST\_AS\_PATH\_9 | | ✓ | ✓ | ✓ | | DST\_FATHER\_PROC\_NAME | | ✓ | ✓ | ✓ | | DST\_FATHER\_PROC\_PID | | ✓ | ✓ | ✓ | | DST\_FRAGMENTS | | ✓ | ✓ | ✓ | | DST\_HOST\_NAME | | ✓ | ✓ | ✓ | | DST\_IP\_CITY | | ✓ | ✓ | ✓ | | DST\_IP\_COUNTRY | | ✓ | ✓ | ✓ | | DST\_IP\_LAT | | ✓ | ✓ | ✓ | | DST\_IP\_LONG | | ✓ | ✓ | ✓ | | DST\_PROC\_ACTUAL\_MEMORY | | ✓ | ✓ | ✓ | | DST\_PROC\_AVERAGE\_CPU\_LOAD | | ✓ | ✓ | ✓ | | DST\_PROC\_NAME | | ✓ | ✓ | ✓ | | DST\_PROC\_NUM\_PAGE\_FAULTS | | ✓ | ✓ | ✓ | | DST\_PROC\_PCTG\_IOWAIT | | ✓ | ✓ | ✓ | | DST\_PROC\_PEAK\_MEMORY | | ✓ | ✓ | ✓ | | DST\_PROC\_PID | | ✓ | ✓ | ✓ | | DST\_PROC\_UID | | ✓ | ✓ | ✓ | | DST\_PROC\_USER\_NAME | | ✓ | ✓ | ✓ | | DST\_TO\_SRC\_AVG\_THROUGHPUT | | ✓ | ✓ | ✓ | | DST\_TO\_SRC\_MAX\_THROUGHPUT | | ✓ | ✓ | ✓ | | DST\_TO\_SRC\_MIN\_THROUGHPUT | | ✓ | ✓ | ✓ | | DST\_TO\_SRC\_SECOND\_BYTES | | ✓ | ✓ | ✓ | | DURATION\_IN | | ✓ | ✓ | ✓ | | DURATION\_OUT | | ✓ | ✓ | ✓ | | ENTROPY\_CLIENT\_BYTES | | ✓ | ✓ | ✓ | | ENTROPY\_SERVER\_BYTES | | ✓ | ✓ | ✓ | | EPP\_CMD | | ✓ | ✓ | ✓ | | EPP\_CMD\_ARGS | | ✓ | ✓ | ✓ | | EPP\_REASON\_STR | | ✓ | ✓ | ✓ | | EPP\_REGISTRAR\_NAME | | ✓ | ✓ | ✓ | | EPP\_RSP\_CODE | | ✓ | ✓ | ✓ | | EPP\_SERVER\_NAME | | ✓ | ✓ | ✓ | | FLOW\_PROTO\_PORT | | ✓ | ✓ | ✓ | | FLOW\_SERVER\_NAME | | ✓ | ✓ | ✓ | | FLOW\_USER\_NAME | | ✓ | ✓ | ✓ | | FTP\_COMMAND | | ✓ | ✓ | ✓ | | FTP\_COMMAND\_RET\_CODE | | ✓ | ✓ | ✓ | | FTP\_LOGIN | | ✓ | ✓ | ✓ | | FTP\_PASSWORD | | ✓ | ✓ | ✓ | | GTPV0\_APN\_NAME | | ✓ | ✓ | ✓ | | GTPV0\_END\_USER\_IP | | ✓ | ✓ | ✓ | | GTPV0\_END\_USER\_MSISDN | | ✓ | ✓ | ✓ | | GTPV0\_RAI\_CELL\_LAC | | ✓ | ✓ | ✓ | | GTPV0\_RAI\_CELL\_RAC | | ✓ | ✓ | ✓ | | GTPV0\_RAI\_MCC | | ✓ | ✓ | ✓ | | GTPV0\_RAI\_MNC | | ✓ | ✓ | ✓ | | GTPV0\_REQ\_MSG\_TYPE | | ✓ | ✓ | ✓ | | GTPV0\_RESPONSE\_CAUSE | | ✓ | ✓ | ✓ | | GTPV0\_RSP\_MSG\_TYPE | | ✓ | ✓ | ✓ | | GTPV0\_TID | | ✓ | ✓ | ✓ | | GTPV1\_APN\_NAME | | ✓ | ✓ | ✓ | | GTPV1\_C2S\_TEID\_CTRL | | ✓ | ✓ | ✓ | | GTPV1\_C2S\_TEID\_DATA | | ✓ | ✓ | ✓ | | GTPV1\_END\_USER\_IMEI | | ✓ | ✓ | ✓ | | GTPV1\_END\_USER\_IMSI | | ✓ | ✓ | ✓ | | GTPV1\_END\_USER\_IP | | ✓ | ✓ | ✓ | | GTPV1\_END\_USER\_MSISDN | | ✓ | ✓ | ✓ | | GTPV1\_RAI\_LAC | | ✓ | ✓ | ✓ | | GTPV1\_RAI\_MCC | | ✓ | ✓ | ✓ | | GTPV1\_RAI\_MNC | | ✓ | ✓ | ✓ | | GTPV1\_RAI\_RAC | | ✓ | ✓ | ✓ | | GTPV1\_RAT\_TYPE | | ✓ | ✓ | ✓ | | GTPV1\_REQ\_MSG\_TYPE | | ✓ | ✓ | ✓ | | GTPV1\_RESPONSE\_CAUSE | | ✓ | ✓ | ✓ | | GTPV1\_RSP\_MSG\_TYPE | | ✓ | ✓ | ✓ | | GTPV1\_S2C\_TEID\_CTRL | | ✓ | ✓ | ✓ | | GTPV1\_S2C\_TEID\_DATA | | ✓ | ✓ | ✓ | | GTPV1\_ULI\_CELL\_CI | | ✓ | ✓ | ✓ | | GTPV1\_ULI\_CELL\_LAC | | ✓ | ✓ | ✓ | | GTPV1\_ULI\_MCC | | ✓ | ✓ | ✓ | | GTPV1\_ULI\_MNC | | ✓ | ✓ | ✓ | | GTPV1\_ULI\_SAC | | ✓ | ✓ | ✓ | | GTPV2\_APN\_NAME | | ✓ | ✓ | ✓ | | GTPV2\_C2S\_S1U\_GTPU\_IP | | ✓ | ✓ | ✓ | | GTPV2\_C2S\_S1U\_GTPU\_TEID | | ✓ | ✓ | ✓ | | GTPV2\_C2S\_S5\_S8\_GTPC\_IP | | ✓ | ✓ | ✓ | | GTPV2\_C2S\_S5\_S8\_GTPU\_IP | | ✓ | ✓ | ✓ | | GTPV2\_C2S\_S5\_S8\_GTPU\_TEID | | ✓ | ✓ | ✓ | | GTPV2\_C2S\_S5\_S8\_SGW\_GTPU\_IP | | ✓ | ✓ | ✓ | | GTPV2\_C2S\_S5\_S8\_SGW\_GTPU\_TEID | | ✓ | ✓ | ✓ | | GTPV2\_END\_USER\_IMEI | | ✓ | ✓ | ✓ | | GTPV2\_END\_USER\_IMSI | | ✓ | ✓ | ✓ | | GTPV2\_END\_USER\_MSISDN | | ✓ | ✓ | ✓ | | GTPV2\_PDN\_IP | | ✓ | ✓ | ✓ | | GTPV2\_RAT\_TYPE | | ✓ | ✓ | ✓ | | GTPV2\_REQ\_MSG\_TYPE | | ✓ | ✓ | ✓ | | GTPV2\_RESPONSE\_CAUSE | | ✓ | ✓ | ✓ | | GTPV2\_RSP\_MSG\_TYPE | | ✓ | ✓ | ✓ | | GTPV2\_S2C\_S1U\_GTPU\_IP | | ✓ | ✓ | ✓ | | GTPV2\_S2C\_S1U\_GTPU\_TEID | | ✓ | ✓ | ✓ | | GTPV2\_S2C\_S5\_S8\_GTPC\_IP | | ✓ | ✓ | ✓ | | GTPV2\_S2C\_S5\_S8\_GTPU\_IP | | ✓ | ✓ | ✓ | | GTPV2\_S2C\_S5\_S8\_GTPU\_TEID | | ✓ | ✓ | ✓ | | GTPV2\_S2C\_S5\_S8\_SGW\_GTPU\_IP | | ✓ | ✓ | ✓ | | GTPV2\_S2C\_S5\_S8\_SGW\_GTPU\_TEID | | ✓ | ✓ | ✓ | | GTPV2\_S5\_S8\_GTPC\_TEID | | ✓ | ✓ | ✓ | | GTPV2\_ULI\_CELL\_ID | | ✓ | ✓ | ✓ | | GTPV2\_ULI\_CELL\_TAC | | ✓ | ✓ | ✓ | | GTPV2\_ULI\_MCC | | ✓ | ✓ | ✓ | | GTPV2\_ULI\_MNC | | ✓ | ✓ | ✓ | | HASSH\_CLIENT | | ✓ | ✓ | ✓ | | HASSH\_SERVER | | ✓ | ✓ | ✓ | | HTTP\_HOST | | ✓ | ✓ | ✓ | | HTTP\_METHOD | | ✓ | ✓ | ✓ | | HTTP\_MIME | | ✓ | ✓ | ✓ | | HTTP\_REFERER | | ✓ | ✓ | ✓ | | HTTP\_RET\_CODE | | ✓ | ✓ | ✓ | | HTTP\_SITE | | ✓ | ✓ | ✓ | | HTTP\_UA | | ✓ | ✓ | ✓ | | HTTP\_URL | | ✓ | ✓ | ✓ | | HTTP\_VIA | | ✓ | ✓ | ✓ | | HTTP\_X\_FORWARDED\_FOR | | ✓ | ✓ | ✓ | | IMAP\_LOGIN | | ✓ | ✓ | ✓ | | IN\_SRC\_OSI\_SAP | | ✓ | ✓ | ✓ | | JA3C\_HASH | | ✓ | ✓ | ✓ | | JA3S\_HASH | | ✓ | ✓ | ✓ | | L4\_DST\_PORT\_MAP | | ✓ | ✓ | ✓ | | L4\_SRC\_PORT\_MAP | | ✓ | ✓ | ✓ | | L4\_SRV\_PORT | | ✓ | ✓ | ✓ | | L4\_SRV\_PORT\_MAP | | ✓ | ✓ | ✓ | | L7\_PROTO | | ✓ | ✓ | ✓ | | L7\_PROTO | | ✓ | ✓ | ✓ | | L7\_PROTO\_CATEGORY | | ✓ | ✓ | ✓ | | L7\_PROTO\_NAME | | ✓ | ✓ | ✓ | | LONGEST\_FLOW\_PKT | | ✓ | ✓ | ✓ | | MYSQL\_APPL\_LATENCY\_USEC | | ✓ | ✓ | ✓ | | MYSQL\_DB | | ✓ | ✓ | ✓ | | MYSQL\_QUERY | | ✓ | ✓ | ✓ | | MYSQL\_RESPONSE | | ✓ | ✓ | ✓ | | MYSQL\_SERVER\_VERSION | | ✓ | ✓ | ✓ | | MYSQL\_USERNAME | | ✓ | ✓ | ✓ | | NETBIOS\_QUERY\_NAME | | ✓ | ✓ | ✓ | | NETBIOS\_QUERY\_OS | | ✓ | ✓ | ✓ | | NETBIOS\_QUERY\_TYPE | | ✓ | ✓ | ✓ | | NETBIOS\_RESPONSE | | ✓ | ✓ | ✓ | | NPROBE\_IPV4\_ADDRESS | | ✓ | ✓ | ✓ | | NUM\_PKTS\_1024\_TO\_1514\_BYTES | | ✓ | ✓ | ✓ | | NUM\_PKTS\_128\_TO\_256\_BYTES | | ✓ | ✓ | ✓ | | NUM\_PKTS\_256\_TO\_512\_BYTES | | ✓ | ✓ | ✓ | | NUM\_PKTS\_512\_TO\_1024\_BYTES | | ✓ | ✓ | ✓ | | NUM\_PKTS\_OVER\_1514\_BYTES | | ✓ | ✓ | ✓ | | NUM\_PKTS\_TTL\_128\_160 | | ✓ | ✓ | ✓ | | NUM\_PKTS\_TTL\_160\_192 | | ✓ | ✓ | ✓ | | NUM\_PKTS\_TTL\_192\_224 | | ✓ | ✓ | ✓ | | NUM\_PKTS\_TTL\_2\_5 | | ✓ | ✓ | ✓ | | NUM\_PKTS\_TTL\_224\_255 | | ✓ | ✓ | ✓ | | NUM\_PKTS\_TTL\_5\_32 | | ✓ | ✓ | ✓ | | NUM\_PKTS\_TTL\_64\_96 | | ✓ | ✓ | ✓ | | NUM\_PKTS\_TTL\_64\_96 | | ✓ | ✓ | ✓ | | NUM\_PKTS\_TTL\_96\_128 | | ✓ | ✓ | ✓ | | NUM\_PKTS\_TTL\_EQ\_1 | | ✓ | ✓ | ✓ | | NUM\_PKTS\_UP\_TO\_128\_BYTES | | ✓ | ✓ | ✓ | | OOORDER\_IN\_PKTS | | ✓ | ✓ | ✓ | | OOORDER\_OUT\_PKTS | | ✓ | ✓ | ✓ | | ORACLE\_QUERY | | ✓ | ✓ | ✓ | | ORACLE\_QUERY\_DURATION | | ✓ | ✓ | ✓ | | ORACLE\_RSP\_CODE | | ✓ | ✓ | ✓ | | ORACLE\_RSP\_STRING | | ✓ | ✓ | ✓ | | ORACLE\_USERNAME | | ✓ | ✓ | ✓ | | OUT\_DST\_OSI\_SAP | | ✓ | ✓ | ✓ | | PAYLOAD\_HASH | | ✓ | ✓ | ✓ | | PKT\_VECTOR | | ✓ | ✓ | ✓ | | PLUGIN\_NAME | | ✓ | ✓ | ✓ | | POP\_USER | | ✓ | ✓ | ✓ | | PROTOCOL\_MAP | | ✓ | ✓ | ✓ | | RADIUS\_ACCT\_IN\_OCTETS | | ✓ | ✓ | ✓ | | RADIUS\_ACCT\_IN\_PKTS | | ✓ | ✓ | ✓ | | RADIUS\_ACCT\_OUT\_OCTETS | | ✓ | ✓ | ✓ | | RADIUS\_ACCT\_OUT\_PKTS | | ✓ | ✓ | ✓ | | RADIUS\_ACCT\_SESSION\_ID | | ✓ | ✓ | ✓ | | RADIUS\_ACCT\_STATUS\_TYPE | | ✓ | ✓ | ✓ | | RADIUS\_CALLED\_STATION\_ID | | ✓ | ✓ | ✓ | | RADIUS\_CALLING\_STATION\_ID | | ✓ | ✓ | ✓ | | RADIUS\_FRAMED\_IP\_ADDR | | ✓ | ✓ | ✓ | | RADIUS\_NAS\_IDENTIFIER | | ✓ | ✓ | ✓ | | RADIUS\_NAS\_IP\_ADDR | | ✓ | ✓ | ✓ | | RADIUS\_REQ\_MSG\_TYPE | | ✓ | ✓ | ✓ | | RADIUS\_RSP\_MSG\_TYPE | | ✓ | ✓ | ✓ | | RADIUS\_USER\_IMEI | | ✓ | ✓ | ✓ | | RADIUS\_USER\_IMSI | | ✓ | ✓ | ✓ | | RADIUS\_USER\_NAME | | ✓ | ✓ | ✓ | | RETRANSMITTED\_IN\_BYTES | | ✓ | ✓ | ✓ | | RETRANSMITTED\_IN\_PKTS | | ✓ | ✓ | ✓ | | RETRANSMITTED\_OUT\_BYTES | | ✓ | ✓ | ✓ | | RETRANSMITTED\_OUT\_PKTS | | ✓ | ✓ | ✓ | | RTP\_DTMF\_TONES | | ✓ | ✓ | ✓ | | RTP\_FIRST\_SEQ | | ✓ | ✓ | ✓ | | RTP\_FIRST\_TS | | ✓ | ✓ | ✓ | | RTP\_IN\_JITTER | | ✓ | ✓ | ✓ | | RTP\_IN\_MAX\_DELTA | | ✓ | ✓ | ✓ | | RTP\_IN\_MOS | | ✓ | ✓ | ✓ | | RTP\_IN\_PAYLOAD\_TYPE | | ✓ | ✓ | ✓ | | RTP\_IN\_PKT\_DROP | | ✓ | ✓ | ✓ | | RTP\_IN\_PKT\_LOST | | ✓ | ✓ | ✓ | | RTP\_IN\_R\_FACTOR | | ✓ | ✓ | ✓ | | RTP\_IN\_TRANSIT | | ✓ | ✓ | ✓ | | RTP\_LAST\_SEQ | | ✓ | ✓ | ✓ | | RTP\_LAST\_TS | | ✓ | ✓ | ✓ | | RTP\_MOS | | ✓ | ✓ | ✓ | | RTP\_OUT\_JITTER | | ✓ | ✓ | ✓ | | RTP\_OUT\_MAX\_DELTA | | ✓ | ✓ | ✓ | | RTP\_OUT\_MOS | | ✓ | ✓ | ✓ | | RTP\_OUT\_PAYLOAD\_TYPE | | ✓ | ✓ | ✓ | | RTP\_OUT\_PKT\_DROP | | ✓ | ✓ | ✓ | | RTP\_OUT\_PKT\_LOST | | ✓ | ✓ | ✓ | | RTP\_OUT\_R\_FACTOR | | ✓ | ✓ | ✓ | | RTP\_OUT\_TRANSIT | | ✓ | ✓ | ✓ | | RTP\_R\_FACTOR | | ✓ | ✓ | ✓ | | RTP\_RTT | | ✓ | ✓ | ✓ | | RTP\_SIP\_CALL\_ID | | ✓ | ✓ | ✓ | | RTP\_SSRC | | ✓ | ✓ | ✓ | | S1AP\_CAUSE\_ENB\_TO\_MME | | ✓ | ✓ | ✓ | | S1AP\_DETAILED\_CAUSE\_ENB\_TO\_MME | | ✓ | ✓ | ✓ | | S1AP\_ENB\_UE\_S1AP\_ID | | ✓ | ✓ | ✓ | | S1AP\_MME\_UE\_S1AP\_ID | | ✓ | ✓ | ✓ | | S1AP\_MSG\_EMM\_TYPE\_ENB\_TO\_MME | | ✓ | ✓ | ✓ | | S1AP\_MSG\_EMM\_TYPE\_MME\_TO\_ENB | | ✓ | ✓ | ✓ | | S1AP\_MSG\_ESM\_TYPE\_ENB\_TO\_MME | | ✓ | ✓ | ✓ | | S1AP\_MSG\_ESM\_TYPE\_MME\_TO\_ENB | | ✓ | ✓ | ✓ | | SEQ\_PLEN | | ✓ | ✓ | ✓ | | SEQ\_PLEN\_HASH | | ✓ | ✓ | ✓ | | SEQ\_TDIFF | | ✓ | ✓ | ✓ | | SEQ\_TDIFF\_HASH | | ✓ | ✓ | ✓ | | SERVER\_NW\_LATENCY\_MS | | ✓ | ✓ | ✓ | | SERVER\_TCP\_FLAGS | | ✓ | ✓ | ✓ | | SHORTEST\_FLOW\_PKT | | ✓ | ✓ | ✓ | | SIP\_BYE\_OK\_TIME | | ✓ | ✓ | ✓ | | SIP\_BYE\_TIME | | ✓ | ✓ | ✓ | | SIP\_C\_IP | | ✓ | ✓ | ✓ | | SIP\_CALL\_ID | | ✓ | ✓ | ✓ | | SIP\_CALL\_STATE | | ✓ | ✓ | ✓ | | SIP\_CALLED\_PARTY | | ✓ | ✓ | ✓ | | SIP\_CALLING\_PARTY | | ✓ | ✓ | ✓ | | SIP\_CANCEL\_OK\_TIME | | ✓ | ✓ | ✓ | | SIP\_CANCEL\_TIME | | ✓ | ✓ | ✓ | | SIP\_INVITE\_FAILURE\_TIME | | ✓ | ✓ | ✓ | | SIP\_INVITE\_OK\_TIME | | ✓ | ✓ | ✓ | | SIP\_INVITE\_TIME | | ✓ | ✓ | ✓ | | SIP\_REASON\_CAUSE | | ✓ | ✓ | ✓ | | SIP\_RESPONSE\_CODE | | ✓ | ✓ | ✓ | | SIP\_RINGING\_TIME | | ✓ | ✓ | ✓ | | SIP\_RTP\_CODECS | | ✓ | ✓ | ✓ | | SIP\_RTP\_IPV4\_DST\_ADDR | | ✓ | ✓ | ✓ | | SIP\_RTP\_IPV4\_SRC\_ADDR | | ✓ | ✓ | ✓ | | SIP\_RTP\_L4\_DST\_PORT | | ✓ | ✓ | ✓ | | SIP\_RTP\_L4\_SRC\_PORT | | ✓ | ✓ | ✓ | | SIP\_TRYING\_TIME | | ✓ | ✓ | ✓ | | SIP\_UAC | | ✓ | ✓ | ✓ | | SIP\_UAS | | ✓ | ✓ | ✓ | | SMTP\_MAIL\_FROM | | ✓ | ✓ | ✓ | | SMTP\_RCPT\_TO | | ✓ | ✓ | ✓ | | SRC\_AS\_MAP | | ✓ | ✓ | ✓ | | SRC\_AS\_PATH\_1 | | ✓ | ✓ | ✓ | | SRC\_AS\_PATH\_10 | | ✓ | ✓ | ✓ | | SRC\_AS\_PATH\_2 | | ✓ | ✓ | ✓ | | SRC\_AS\_PATH\_3 | | ✓ | ✓ | ✓ | | SRC\_AS\_PATH\_4 | | ✓ | ✓ | ✓ | | SRC\_AS\_PATH\_5 | | ✓ | ✓ | ✓ | | SRC\_AS\_PATH\_6 | | ✓ | ✓ | ✓ | | SRC\_AS\_PATH\_7 | | ✓ | ✓ | ✓ | | SRC\_AS\_PATH\_8 | | ✓ | ✓ | ✓ | | SRC\_AS\_PATH\_9 | | ✓ | ✓ | ✓ | | SRC\_FATHER\_PROC\_NAME | | ✓ | ✓ | ✓ | | SRC\_FATHER\_PROC\_PID | | ✓ | ✓ | ✓ | | SRC\_FRAGMENTS | | ✓ | ✓ | ✓ | | SRC\_HOST\_NAME | | ✓ | ✓ | ✓ | | SRC\_IP\_CITY | | ✓ | ✓ | ✓ | | SRC\_IP\_COUNTRY | | ✓ | ✓ | ✓ | | SRC\_IP\_LAT | | ✓ | ✓ | ✓ | | SRC\_IP\_LONG | | ✓ | ✓ | ✓ | | SRC\_PROC\_ACTUAL\_MEMORY | | ✓ | ✓ | ✓ | | SRC\_PROC\_AVERAGE\_CPU\_LOAD | | ✓ | ✓ | ✓ | | SRC\_PROC\_NAME | | ✓ | ✓ | ✓ | | SRC\_PROC\_NUM\_PAGE\_FAULTS | | ✓ | ✓ | ✓ | | SRC\_PROC\_PCTG\_IOWAIT | | ✓ | ✓ | ✓ | | SRC\_PROC\_PEAK\_MEMORY | | ✓ | ✓ | ✓ | | SRC\_PROC\_PID | | ✓ | ✓ | ✓ | | SRC\_PROC\_UID | | ✓ | ✓ | ✓ | | SRC\_PROC\_USER\_NAME | | ✓ | ✓ | ✓ | | SRC\_TO\_DST\_AVG\_THROUGHPUT | | ✓ | ✓ | ✓ | | SRC\_TO\_DST\_MAX\_THROUGHPUT | | ✓ | ✓ | ✓ | | SRC\_TO\_DST\_MIN\_THROUGHPUT | | ✓ | ✓ | ✓ | | SRC\_TO\_DST\_SECOND\_BYTES | | ✓ | ✓ | ✓ | | SSDP\_HOST | | ✓ | ✓ | ✓ | | SSDP\_METHOD | | ✓ | ✓ | ✓ | | SSDP\_SERVER | | ✓ | ✓ | ✓ | | SSDP\_TYPE | | ✓ | ✓ | ✓ | | SSDP\_USN | | ✓ | ✓ | ✓ | | SSL\_CIPHER | | ✓ | ✓ | ✓ | | SSL\_SERVER\_NAME | | ✓ | ✓ | ✓ | | SSL\_UNSAFE\_CIPHER | | ✓ | ✓ | ✓ | | SSL\_VERSION | | ✓ | ✓ | ✓ | | TCP\_WIN\_MAX\_IN | | ✓ | ✓ | ✓ | | TCP\_WIN\_MAX\_OUT | | ✓ | ✓ | ✓ | | TCP\_WIN\_MIN\_IN | | ✓ | ✓ | ✓ | | TCP\_WIN\_MIN\_OUT | | ✓ | ✓ | ✓ | | TCP\_WIN\_MSS\_IN | | ✓ | ✓ | ✓ | | TCP\_WIN\_MSS\_OUT | | ✓ | ✓ | ✓ | | TCP\_WIN\_SCALE\_IN | | ✓ | ✓ | ✓ | | TCP\_WIN\_SCALE\_OUT | | ✓ | ✓ | ✓ | | UNTUNNELED\_IPV4\_DST\_ADDR | | ✓ | ✓ | ✓ | | UNTUNNELED\_IPV4\_SRC\_ADDR | | ✓ | ✓ | ✓ | | UNTUNNELED\_IPV6\_DST\_ADDR | | ✓ | ✓ | ✓ | | UNTUNNELED\_IPV6\_SRC\_ADDR | | ✓ | ✓ | ✓ | | UNTUNNELED\_L4\_DST\_PORT | | ✓ | ✓ | ✓ | | UNTUNNELED\_L4\_SRC\_PORT | | ✓ | ✓ | ✓ | | UNTUNNELED\_PROTOCOL | | ✓ | ✓ | ✓ | | UPSTREAM\_SESSION\_ID | | ✓ | ✓ | ✓ | | UPSTREAM\_TUNNEL\_ID | | ✓ | ✓ | ✓ | | USER\_NAME | | ✓ | ✓ | ✓ | | WHOIS\_DAS\_DOMAIN | | ✓ | ✓ | ✓ | #### A10 Networks (PEN: 40842) | Name | Community | Basic | Standard | Premium | | -------------------------- | :-------: | :---: | :------: | :-----: | | cgn-flow-direction | | ✓ | ✓ | ✓ | | Custom1 | | ✓ | ✓ | ✓ | | Custom2 | | ✓ | ✓ | ✓ | | Custom3 | | ✓ | ✓ | ✓ | | DestZone | | ✓ | ✓ | ✓ | | flowDurationMilliseconds64 | | ✓ | ✓ | ✓ | | fwDenyReset | | ✓ | ✓ | ✓ | | fwdTupleType | | ✓ | ✓ | ✓ | | fwdVNPID | | ✓ | ✓ | ✓ | | mobileIMEI | | ✓ | ✓ | ✓ | | revTupleType | | ✓ | ✓ | ✓ | | revVNPID | | ✓ | ✓ | ✓ | | RuleName | | ✓ | ✓ | ✓ | | RuleSetName | | ✓ | ✓ | ✓ | | SourceZone | | ✓ | ✓ | ✓ | --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://docs.elastiflow.com/flowcoll/supported_ie/supported_ie_netflow.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.