The NetworkFlowLabelType contains elements that are common to all flow record formats. It builds off of network layer information (a 5-tuple that commonly defines a flow) and includes ingress and egress interface indexes and IP protocol information (not present if all flow record formats). Egress information is usually not thought of as part of the extended 7-tuple, but we include it for organizational purposes. Because these fields are defined here, they are excluded from the fields associated directly with each different flow record format type.
Field Name | Type | Description |
---|---|---|
Src_Socket_Address0..1 | SocketAddressObjectType |
Represents the source IP socket address, consisting of an IP address and port number, for the network flow expressed. Note that not all flow protocols support IPv6 addresses. |
Dest_Socket_Address0..1 | SocketAddressObjectType |
Represents the destination IP socket address, consisting of an IP address and port number, for the network flow expressed. Note that not all flow protocols support IPv6 addresses. |
IP_Protocol0..1 | IANAAssignedIPNumbersType |
The IP Protocol of the network flow. This is usually TCP, UDP, or SCTP, but can include others as represented in NetFlow as an integer from 0 to 255. Please refer to http://www.iana.org/assignments/protocol-numbers/protocol-numbers.xml for reference. |
Ingress_Interface_Index0..1 | IntegerObjectPropertyType |
Represents the index (in SNMP, by default) of the network interface card where the flows entered the router. |
Egress_Interface_Index0..1 | IntegerObjectPropertyType |
Represents the index (in SNMP, by default) of the network interface card where the flows leave the router. |
IP_Type_Of_Service0..1 | HexBinaryObjectPropertyType |
Type of service field from the IP header. Specifies the IP Type of Service (ToS). See RFC 1349 for more information. |