NetflowV5FlowRecordTypeNetwork Flow Object Schema

Defines elements of a Netflow v5 flow record. Recall that the seven elements that define the flow itself (e.g., source IP address) are provided in NetworkFlowLabelType. https://bto.bluecoat.com/packetguide/8.6/info/netflow5-records.htm.


Fields

Field Name Type Description
Nexthop_IPv4_Addr0..1 AddressObjectType

Represents the IP address of the next hop router.

Packet_Count0..1 IntegerObjectPropertyType

Represents the number of packets in the flow.

Byte_Count0..1 IntegerObjectPropertyType

Represents the total number of bytes in the flow.

SysUpTime_Start0..1 IntegerObjectPropertyType

Represents the SysUpTime at start of flow: the total time in milliseconds starting from when the first packet in the flow was seen.

SysUpTime_End0..1 IntegerObjectPropertyType

Represents the SysUpTime at end of flow: when the last packet in the flow was seen.

Padding10..1 HexBinaryObjectPropertyType

One byte of padding.

TCP_Flags0..1 HexBinaryObjectPropertyType

Specifies the union of all TCP flags observed over the life of the flow.

Src_Autonomous_System0..1 IntegerObjectPropertyType

Specifies the source autonomous system number, either origin or peer.

Dest_Autonomous_System0..1 IntegerObjectPropertyType

Specifies the destination autonomous system number, either origin or peer.

Src_IP_Mask_Bit_Count0..1 StringObjectPropertyType

Specifies the source address prefix mask bits.

Dest_IP_Mask_Bit_Count0..1 StringObjectPropertyType

Specifies the destination address prefix mask bits.

Padding20..1 HexBinaryObjectPropertyType

Unused (zero) bytes, which is used for purposes of padding.