Network layer information (relative to the OSI network model) which is typically captured in all types of network flow records.
Field Name | Type | Description |
---|---|---|
Src_Socket_Address0..1 | SocketAddressObjectType |
Represents the source IP socket address, consisting of an IP address and port number, for the network flow expressed. Note that not all flow protocols support IPv6 addresses. |
Dest_Socket_Address0..1 | SocketAddressObjectType |
Represents the destination IP socket address, consisting of an IP address and port number, for the network flow expressed. Note that not all flow protocols support IPv6 addresses. |
IP_Protocol0..1 | IANAAssignedIPNumbersType |
The IP Protocol of the network flow. This is usually TCP, UDP, or SCTP, but can include others as represented in NetFlow as an integer from 0 to 255. Please refer to http://www.iana.org/assignments/protocol-numbers/protocol-numbers.xml for reference. |