The NetFlow v5 record type contains the following fields.
Name | Description | Offset | Field Length in Bytes |
Source IPaddr | ProxySG appliance IP address | 0 | 4 |
DestinationIPaddr | Collector IP address | 4 | 4 |
Next hop router IP address |
N/A Value is 0 | 8 | 4 |
Next hop router IP address |
SNMP index of input interface A value of 0 indicates traffic being sent to the appliance | 12 | 2 |
Outbound snmpIFindex |
SNMP index of output interface A value of 0 indicates traffic originating from the appliance | 14 | 2 |
Packet Count | Number of packets in the flow | 16 | 4 |
Byte Count | Total number of Layer 3 bytes in the packets of the flow | 20 | 4 |
Time at Start of Flow | Value of "SysUpTime" when the first packet in the flow was seen (measured in milliseconds) | 24 | 4 |
Source Port | Source application port number | 32 | 2 |
Destination Port | Destination application port number | 34 | 2 |
One pad byte | Unused (zero) bytes | 36 | 1 |
TCP flags | Protocol state | 37 | 1 |
Layer 4 Protocol |
IP protocol type Value is 17 for UDP | 38 | 1 |
IP Type of Service (ToS)/Diffserv | IP type of service (ToS) | 39 | 1 |
Source Autonomous Sys ID |
N/A Value is 0 | 40 | 2 |
Dest. Autonomous Sys ID | N/A
Value is 0 | 42 | 2 |
Source Mask Bits Count | N/A
Value is 0 | 44 | 1 |
Destination Mask Bits Count |
N/A Value is 0 | 45 | 1 |
Two Pad Bytes | Unused (zero) bytes | 46 | 2 |