NetworkFlowLabelTypeNetwork Flow Object Schema

The NetworkFlowLabelType contains elements that are common to all flow record formats. It builds off of network layer information (a 5-tuple that commonly defines a flow) and includes ingress and egress interface indexes and IP protocol information (not present if all flow record formats). Egress information is usually not thought of as part of the extended 7-tuple, but we include it for organizational purposes. Because these fields are defined here, they are excluded from the fields associated directly with each different flow record format type.


Fields

Field Name Type Description
Src_Socket_Address0..1 SocketAddressObjectType

Represents the source IP socket address, consisting of an IP address and port number, for the network flow expressed. Note that not all flow protocols support IPv6 addresses.

Dest_Socket_Address0..1 SocketAddressObjectType

Represents the destination IP socket address, consisting of an IP address and port number, for the network flow expressed. Note that not all flow protocols support IPv6 addresses.

IP_Protocol0..1 IANAAssignedIPNumbersType

The IP Protocol of the network flow. This is usually TCP, UDP, or SCTP, but can include others as represented in NetFlow as an integer from 0 to 255. Please refer to http://www.iana.org/assignments/protocol-numbers/protocol-numbers.xml for reference.

Ingress_Interface_Index0..1 IntegerObjectPropertyType

Represents the index (in SNMP, by default) of the network interface card where the flows entered the router.

Egress_Interface_Index0..1 IntegerObjectPropertyType

Represents the index (in SNMP, by default) of the network interface card where the flows leave the router.

IP_Type_Of_Service0..1 HexBinaryObjectPropertyType

Type of service field from the IP header. Specifies the IP Type of Service (ToS). See RFC 1349 for more information.