What fields do NetFlow v5 records contain?

Products

• Asset Management Solution
• ProxySG Software - SGOS

Issue/Introduction

The NetFlow v5 record type contains the following fields. 

Name	Description	Offset	Field Length in Bytes
Source IPaddr	ProxySG appliance IP address	0	4
DestinationIPaddr	Collector IP address	4	4
Next hop router IP address	N/A Value is 0	8	4
Next hop router IP address	SNMP index of input interface A value of 0 indicates traffic being sent to the appliance	12	2
Outbound snmpIFindex	SNMP index of output interface A value of 0 indicates traffic originating from the appliance	14	2
Packet Count	Number of packets in the flow	16	4
Byte Count	Total number of Layer 3 bytes in the packets of the flow	20	4
Time at Start of Flow	Value of "SysUpTime" when the first packet in the flow was seen (measured in milliseconds)	24	4
Source Port	Source application port number	32	2
Destination Port	Destination application port number	34	2
One pad byte	Unused (zero) bytes	36	1
TCP flags	Protocol state	37	1
Layer 4 Protocol	IP protocol type Value is 17 for UDP	38	1
IP Type of Service (ToS)/Diffserv	IP type of service (ToS)	39	1
Source Autonomous Sys ID	N/A Value is 0	40	2
Dest. Autonomous Sys ID	N/A Value is 0	42	2
Source Mask Bits Count	N/A Value is 0	44	1
Destination Mask Bits Count	N/A Value is 0	45	1
Two Pad Bytes	Unused (zero) bytes	46	2