Netflow IEs
NetObserv Flow supports Netflow versions 1, 5, 6, 7 and 9 records.
Netflow v1
NetObserv Flow supports 14 unique Netflow v1 information elements (IE).
dOctets
✓
✓
✓
✓
dPkts
✓
✓
✓
✓
dstaddr
✓
✓
✓
✓
dstport
✓
✓
✓
✓
First
✓
✓
✓
✓
input
✓
✓
✓
✓
Last
✓
✓
✓
✓
nexthop
✓
✓
✓
✓
output
✓
✓
✓
✓
prot
✓
✓
✓
✓
srcaddr
✓
✓
✓
✓
srcport
✓
✓
✓
✓
tcp_flags
✓
✓
✓
✓
tos
✓
✓
✓
✓
Netflow v5
NetObserv Flow support 18 unique Netflow v5 information elements (IE).
dOctets
✓
✓
✓
✓
dPkts
✓
✓
✓
✓
dst_as
✓
✓
✓
✓
dst_mask
✓
✓
✓
✓
dstaddr
✓
✓
✓
✓
dstport
✓
✓
✓
✓
First
✓
✓
✓
✓
input
✓
✓
✓
✓
Last
✓
✓
✓
✓
nexthop
✓
✓
✓
✓
output
✓
✓
✓
✓
prot
✓
✓
✓
✓
src_as
✓
✓
✓
✓
src_mask
✓
✓
✓
✓
srcaddr
✓
✓
✓
✓
srcport
✓
✓
✓
✓
tcp_flags
✓
✓
✓
✓
tos
✓
✓
✓
✓
Netflow v6
NetObserv Flow support 18 unique Netflow v6 information elements (IE).
dOctets
✓
✓
✓
✓
dPkts
✓
✓
✓
✓
dst_as
✓
✓
✓
✓
dst_mask
✓
✓
✓
✓
dstaddr
✓
✓
✓
✓
dstport
✓
✓
✓
✓
First
✓
✓
✓
✓
input
✓
✓
✓
✓
Last
✓
✓
✓
✓
nexthop
✓
✓
✓
✓
output
✓
✓
✓
✓
prot
✓
✓
✓
✓
src_as
✓
✓
✓
✓
src_mask
✓
✓
✓
✓
srcaddr
✓
✓
✓
✓
srcport
✓
✓
✓
✓
tcp_flags
✓
✓
✓
✓
tos
✓
✓
✓
✓
Netflow v7
NetObserv Flow support 19 unique Netflow v7 information elements (IE).
dOctets
✓
✓
✓
✓
dPkts
✓
✓
✓
✓
dst_as
✓
✓
✓
✓
dst_mask
✓
✓
✓
✓
dstaddr
✓
✓
✓
✓
dstport
✓
✓
✓
✓
First
✓
✓
✓
✓
input
✓
✓
✓
✓
ipv4RouterSc
✓
✓
✓
✓
Last
✓
✓
✓
✓
nexthop
✓
✓
✓
✓
output
✓
✓
✓
✓
prot
✓
✓
✓
✓
src_as
✓
✓
✓
✓
src_mask
✓
✓
✓
✓
srcaddr
✓
✓
✓
✓
srcport
✓
✓
✓
✓
tcp_flags
✓
✓
✓
✓
tos
✓
✓
✓
✓
Netflow v9
NetObserv Flow supports over 1500 unique Netflow v9 information elements (IE).
0
IANA
462
9
Cisco
581
193
Ericsson
8
4056
StreamCORE
28
4321
Riverbed
12
8712
LANcope (Cisco)
43
25461
Palo Alto Networks
2
33610
FastIP / Boundary
23
35632
ntop
370
40842
A10 Networks
15
Standards-based IEs (PEN: 0)
1
octetDeltaCount
✓
✓
✓
✓
2
packetDeltaCount
✓
✓
✓
✓
3
deltaFlowCount
✓
✓
✓
✓
4
protocolIdentifier
✓
✓
✓
✓
5
ipClassOfService
✓
✓
✓
✓
6
tcpControlBits
✓
✓
✓
✓
7
sourceTransportPort
✓
✓
✓
✓
8
sourceIPv4Address
✓
✓
✓
✓
9
sourceIPv4PrefixLength
✓
✓
✓
✓
10
ingressInterface
✓
✓
✓
✓
11
destinationTransportPort
✓
✓
✓
✓
12
destinationIPv4Address
✓
✓
✓
✓
13
destinationIPv4PrefixLength
✓
✓
✓
✓
14
egressInterface
✓
✓
✓
✓
15
ipNextHopIPv4Address
✓
✓
✓
✓
16
bgpSourceAsNumber
✓
✓
✓
✓
17
bgpDestinationAsNumber
✓
✓
✓
✓
18
bgpNextHopIPv4Address
✓
✓
✓
✓
19
postMCastPacketDeltaCount
✓
✓
✓
✓
20
postMCastOctetDeltaCount
✓
✓
✓
✓
21
flowEndSysUpTime
✓
✓
✓
✓
22
flowStartSysUpTime
✓
✓
✓
✓
23
postOctetDeltaCount
✓
✓
✓
✓
24
postPacketDeltaCount
✓
✓
✓
✓
25
minimumIpTotalLength
✓
✓
✓
✓
26
maximumIpTotalLength
✓
✓
✓
✓
27
sourceIPv6Address
✓
✓
✓
✓
28
destinationIPv6Address
✓
✓
✓
✓
29
sourceIPv6PrefixLength
✓
✓
✓
✓
30
destinationIPv6PrefixLength
✓
✓
✓
✓
31
flowLabelIPv6
✓
✓
✓
✓
32
icmpTypeCodeIPv4
✓
✓
✓
✓
33
igmpType
✓
✓
✓
✓
34
samplingInterval
✓
✓
✓
✓
35
samplingAlgorithm
✓
✓
✓
✓
36
flowActiveTimeout
✓
✓
✓
✓
37
flowIdleTimeout
✓
✓
✓
✓
38
engineType
✓
✓
✓
✓
39
engineId
✓
✓
✓
✓
40
exportedOctetTotalCount
✓
✓
✓
✓
41
exportedMessageTotalCount
✓
✓
✓
✓
42
exportedFlowRecordTotalCount
✓
✓
✓
✓
44
sourceIPv4Prefix
✓
✓
✓
✓
45
destinationIPv4Prefix
✓
✓
✓
✓
46
mplsTopLabelType
✓
✓
✓
✓