-
Notifications
You must be signed in to change notification settings - Fork 0
/
field_types.py
1698 lines (1695 loc) · 95.9 KB
/
field_types.py
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
# Copyright (c) 2017, Manito Networks, LLC
# All rights reserved.
# Types of Netflow v9 fields, per https://www.ietf.org/rfc/rfc3954.txt and http://www.iana.org/assignments/ipfix/ipfix.xhtml#ipfix-information-elements
# Special ASA fields per http://www.cisco.com/c/en/us/td/docs/security/asa/special/netflow/guide/asa_netflow.html#pgfId-1330387
v9_fields = {
1:{"Name":"IN_BYTES", "Type":"Integer", "Index ID":"Bytes In"},
2:{"Name":"IN_PKTS", "Type":"Integer", "Index ID":"Packets In"},
3:{"Name":"FLOWS", "Type":"Integer", "Index ID":"Flows"},
4:{
"Name":"PROTOCOL",
"Type":"Integer",
"Index ID":"Protocol",
"Options": {
0:'HOPOPT',
1:'ICMP',
2:'IGMP',
3:'GGP',
4:'IP-in-IP',
5:'ST',
6:'TCP',
7:'CBT',
8:'EGP',
9:'IGP',
10:'BBN-RCC-MON',
11:'NVP-II',
12:'PUP',
13:'ARGUS',
14:'EMCON',
15:'XNET',
16:'CHAOS',
17:'UDP',
18:'MUX',
19:'DCN-MEAS',
20:'HMP',
21:'PRM',
22:'XNS-IDP',
23:'TRUNK-1',
24:'TRUNK-2',
25:'LEAF-1',
26:'LEAF-2',
27:'RDP',
28:'IRTP',
29:'ISO-TP4',
30:'NETBLT',
31:'MFE-NSP',
32:'MERIT-INP',
33:'DCCP',
34:'3PC',
35:'IDPR',
36:'XTP',
37:'DDP',
38:'IDPR-CMTP',
39:'TP++',
40:'IL',
41:'IPv6 6in4',
42:'SDRP',
43:'IPv6 Routing',
44:'IPv6 Fragment',
45:'IDRP',
46:'RSVP',
47:'GRE',
48:'DSR',
49:'BNA',
50:'ESP',
51:'AH',
52:'I-NLSP',
53:'SWIPE',
54:'NARP',
55:'IP Mobility',
56:'TLSP',
57:'SKIP',
58:'IPv6 ICMP',
59:'IPv6 NoNxt',
60:'IPv6 Options',
61:'Host Internal Protocol',
62:'CFTP',
63:'Local Network',
64:'SAT-EXPAK',
65:'KRYPTOLAN',
66:'RVD',
67:'IPPC',
68:'Distributed File System',
69:'SAT-MON',
70:'VISA',
71:'IPCV',
72:'CPNX',
73:'CPHB',
74:'WSN',
75:'PVP',
76:'BR-SAT-MON',
77:'SUN-ND',
78:'WB-MON',
79:'WB-EXPAK',
80:'ISO-IP',
81:'VMTP',
82:'SECURE-VMTP',
83:'VINES',
84:'TTP / IPTM',
85:'NSFNET-IGP',
86:'DGP',
87:'TCF',
88:'EIGRP',
89:'OSPF',
90:'Sprite-RPC',
91:'LARP',
92:'MTP',
93:'AX.25',
94:'IPIP',
95:'MICP ',
96:'SCC-SP',
97:'ETHERIP',
98:'ENCAP',
99:'Private Encryption Scheme',
100:'GMTP',
101:'IFMP',
102:'PNNI',
103:'PIM',
104:'ARIS',
105:'SCPS',
106:'QNX',
107:'A/N',
108:'IPComp',
109:'SNP',
110:'Compaq-Peer',
111:'IPX-in-IP',
112:'VRRP',
113:'PGM',
114:'0-Hop Protocol',
115:'L2TP',
116:'DDX',
117:'IATP',
118:'STP',
119:'SRP',
120:'UTI',
121:'SMP',
122:'SM',
123:'PTP',
124:'ISIS over IPv4',
125:'FIRE',
126:'CRTP',
127:'CRUDP',
128:'SSCOPMCE',
129:'IPLT',
130:'SPS',
131:'PIPE',
132:'SCTP',
133:'Fibre Channel',
134:'RSVP-E2E-IGNORE',
135:'Mobility Header',
136:'UDPLite',
137:'MPLS-in-IP',
138:'MANET',
139:'HIP',
140:'Shim6',
141:'WESP',
142:'ROHC',
253:'Experimentation and Testing',
254:'Experimentation and Testing',
255:'Reserved'
}
},
5:{"Name":"SRC_TOS", "Type":"Integer", "Index ID":"Source Type of Service"},
6:{"Name":"TCP_FLAGS", "Type":"Integer", "Index ID":"TCP Flags"},
7:{"Name":"L4_SRC_PORT", "Type":"Integer", "Index ID":"Source Port"},
8:{"Name":"IPV4_SRC_ADDR", "Type":"IPv4", "Index ID":"IPv4 Source"},
9:{"Name":"SRC_MASK", "Type":"Integer", "Index ID":"Source Mask"},
10:{"Name":"INPUT_SNMP", "Type":"Integer", "Index ID":"Input Interface"},
11:{"Name":"L4_DST_PORT", "Type":"Integer", "Index ID":"Destination Port"},
12:{"Name":"IPV4_DST_ADDR", "Type":"IPv4", "Index ID":"IPv4 Destination"},
13:{"Name":"DST_MASK", "Type":"Integer", "Index ID":"Destination Mask"},
14:{"Name":"OUTPUT_SNMP", "Type":"Integer", "Index ID":"Output Interface"},
15:{"Name":"IPV4_NEXT_HOP", "Type":"IPv4", "Index ID":"IPv4 Next Hop"},
16:{"Name":"SRC_AS", "Type":"Integer", "Index ID":"Source AS"},
17:{"Name":"DST_AS", "Type":"Integer", "Index ID":"Destination AS"},
18:{"Name":"BGP_IPV4_NEXT_HOP", "Type":"IPv4", "Index ID":"BGP IPv4 Next Hop"},
19:{"Name":"MUL_DST_PKTS", "Type":"Integer", "Index ID":"Multicast Destination Packets"},
20:{"Name":"MUL_DST_BYTES", "Type":"Integer", "Index ID":"Multicast Destination Bytes"},
21:{"Name":"LAST_SWITCHED", "Type":"Integer", "Index ID":"Last Switched"},
22:{"Name":"FIRST_SWITCHED", "Type":"Integer", "Index ID":"First Switched"},
23:{"Name":"OUT_BYTES", "Type":"Integer", "Index ID":"Bytes Out"},
24:{"Name":"OUT_PKTS", "Type":"Integer", "Index ID":"Packets Out"},
25:{"Name":"MIN_PKT_LNGTH", "Type":"Integer", "Index ID":"Minimum Packet Length"},
26:{"Name":"MAX_PKT_LNGTH", "Type":"Integer", "Index ID":"Maximum Packet Length"},
27:{"Name":"IPV6_SRC_ADDR", "Type":"IPv6", "Index ID":"IPv6 Source"},
28:{"Name":"IPV6_DST_ADDR", "Type":"IPv6", "Index ID":"IPv6 Destination"},
29:{"Name":"IPV6_SRC_MASK", "Type":"Integer", "Index ID":"IPv6 Source Mask"},
30:{"Name":"IPV6_DST_MASK", "Type":"Integer", "Index ID":"IPv6 Destination Mask"},
31:{"Name":"IPV6_FLOW_LABEL", "Type":"Integer", "Index ID":"IPv6 Flow Label"},
32:{
"Name":"ICMP_TYPE",
"Type":"Integer",
"Index ID":"ICMP Type",
"Options": {
0: {"Type":"Echo Reply","Codes": {0: "No Code"}},
1: {"Type":"Unassigned"},
2: {"Type":"Unassigned"},
3: {
"Type":"Destination Unreachable",
"Codes": {
0: "Net Unreachable",
1: "Host Unreachable",
2: "Protocol Unreachable",
3: "Port Unreachable",
4: "Fragmentation Needed and Don't Fragment was Set",
5: "Source Route Failed",
6: "Destination Network Unknown",
7: "Destination Host Unknown",
8: "Source Host Isolated",
9: "Communication with Destination Network is Administratively Prohibited",
10: "Communication with Destination Host is Administratively Prohibited",
11: "Destination Network Unreachable for Type of Service",
12: "Destination Host Unreachable for Type of Service",
13: "Communication Administratively Prohibited ",
14: "Host Precedence Violation",
15: "Precedence cutoff in effect"
}
},
4: {"Type":"Source Quench","Codes": {0: "No Code"}},
5: {
"Type":"Redirect",
"Codes": {
0: "Redirect Datagram for the Network",
0: "Redirect Datagram for the Host",
0: "Redirect Datagram for the Type of Service and Network",
0: "Redirect Datagram for the Type of Service and Host"
}
},
6: {
"Type":"Alternate Host Address",
"Codes": {
0: "Alternate Address for Host"
}
},
7: {"Type":"Unassigned"},
8: {"Type":"Echo","Codes": {0: "No Code"}},
9: {"Type":"Router Advertisement","Codes": {0: "No Code"}},
10: {"Type":"Router Selection","Codes": {0: "No Code"}},
11: {
"Type":"Time Exceeded",
"Codes": {
0: "Time to Live exceeded in Transit",
1: "Fragment Reassembly Time Exceeded"
}
},
12: {
"Type":"Parameter Problem",
"Codes": {
0: "Pointer indicates the error",
1: "Missing a Required Option",
2: "Bad Length"
}
},
13: {"Type":"Timestamp","Codes": {0: "No Code"}},
14: {"Type":"Timestamp Reply","Codes": {0: "No Code"}},
15: {"Type":"Information Request","Codes": {0: "No Code"}},
16: {"Type":"Information Reply","Codes": {0: "No Code"}},
17: {"Type":"Address Mask Request","Codes": {0: "No Code"}},
18: {"Type":"Address Mask Reply","Codes": {0: "No Code"}},
19: {"Type":"Reserved"},
20: {"Type":"Reserved"},
21: {"Type":"Reserved"},
22: {"Type":"Reserved"},
23: {"Type":"Reserved"},
24: {"Type":"Reserved"},
25: {"Type":"Reserved"},
26: {"Type":"Reserved"},
27: {"Type":"Reserved"},
28: {"Type":"Reserved"},
29: {"Type":"Reserved"},
30: {"Type":"Traceroute"},
31: {"Type":"Datagram Conversion Error"},
32: {"Type":"Mobile Host Redirect"},
33: {"Type":"IPv6 Where-Are-You"},
34: {"Type":"IPv6 I-Am-Here"},
35: {"Type":"Mobile Registration Request"},
36: {"Type":"Mobile Registration Reply"},
37: {"Type":"Domain Name Request"},
38: {"Type":"Domain Name Reply"},
39: {"Type":"SKIP"},
40: {"Type":"Photuris"}
}
}, # Use to calculate ICMP Type and Code (x * 256 + Code), http://www.nthelp.com/icmp.html
33:{"Name":"MUL_IGMP_TYPE", "Type":"Integer", "Index ID":"IGMP Type"},
34:{"Name":"SAMPLING_INTERVAL", "Type":"Integer", "Index ID":"Sampling Interval"},
35:{
"Name":"SAMPLING_ALGORITHM",
"Type":"Integer",
"Index ID":"Sampling Algorithm",
"Options": {
1: "Deterministic Sampling",
2: "Random Sampling"
}
},
36:{"Name":"FLOW_ACTIVE_TIMEOUT", "Type":"Integer", "Index ID":"Flow Active Timeout"},
37:{"Name":"FLOW_INACTIVE_TIMEOUT", "Type":"Integer", "Index ID":"Flow Inactive Timeout"},
38:{
"Name":"ENGINE_TYPE",
"Type":"Integer",
"Index ID":"Engine Type",
"Options": {
0: "RP",
1: "VIP/Line card",
2: "PFC/DFC"
}
},
39:{"Name":"ENGINE_ID", "Type":"Integer", "Index ID":"Engine ID"},
40:{"Name":"TOTAL_BYTES_EXP", "Type":"Integer", "Index ID":"Total Bytes Exported"},
41:{"Name":"TOTAL_PKTS_EXP", "Type":"Integer", "Index ID":"Total Packets Exported"},
42:{"Name":"TOTAL_FLOWS_EXP", "Type":"Integer", "Index ID":"Flows Exported"},
43:{"Name":"Vendor Proprietary", "Type":"Vendor Proprietary", "Index ID":"Vendor Proprietary"},
44:{"Name":"Vendor Proprietary", "Type":"Vendor Proprietary", "Index ID":"Vendor Proprietary"}, # Cisco Catalyst Proprietary
45:{"Name":"Vendor Proprietary", "Type":"Vendor Proprietary", "Index ID":"Vendor Proprietary"}, # Cisco Catalyst Proprietary
46:{
"Name":"MPLS_TOP_LABEL_TYPE",
"Type":"Integer",
"Index ID":"MPLS Top Label Type",
"Options": {
0: "Unknown",
1: "TE-MIDPT",
2: "Pseudowire",
3: "VPN",
4: "BGP",
5: "LDP"
}
},
47:{"Name":"MPLS_TOP_LABEL_IP_ADDR", "Type":"", "Index ID":"MPLS Top Label IP"},
48:{"Name":"FLOW_SAMPLER_ID", "Type":"Integer", "Index ID":"Flow Sampler ID"},
49:{
"Name":"FLOW_SAMPLER_MODE",
"Type":"Integer",
"Index ID":"Flow Sampler Mode",
"Options": {
1: "Deterministic",
2: "Random Sampling",
3: "Random Sampling"
}
},
50:{"Name":"FLOW_SAMPLER_RANDOM_INTERVAL", "Type":"Integer", "Index ID":"Flow Sampler Random Interval"},
51:{"Name":"Vendor Proprietary", "Type":"Vendor Proprietary", "Index ID":""},
52:{"Name":"MIN_TTL", "Type":"Integer", "Index ID":"Minimum TTL"},
53:{"Name":"MAX_TTL", "Type":"Integer", "Index ID":"Maximum TTL"},
54:{"Name":"IPV4_IDENT", "Type":"", "Index ID":"IPv4 ID"},
55:{"Name":"DST_TOS", "Type":"Integer", "Index ID":"Destination Type of Service"},
56:{"Name":"IN_SRC_MAC", "Type":"MAC", "Index ID":"Incoming Source MAC"},
57:{"Name":"OUT_DST_MAC", "Type":"MAC", "Index ID":"Outgoing Destination MAC"},
58:{"Name":"SRC_VLAN", "Type":"Integer", "Index ID":"Source VLAN"},
59:{"Name":"DST_VLAN", "Type":"Integer", "Index ID":"Destination VLAN"},
60:{"Name":"IP_PROTOCOL_VERSION", "Type":"Integer", "Index ID":"IP Protocol Version"},
61:{
"Name":"DIRECTION",
"Type":"Integer",
"Index ID":"Direction",
"Options": {
0: "Ingress",
1: "Egress"
}
},
62:{"Name":"IPV6_NEXT_HOP", "Type":"IPv6", "Index ID":"IPv6 Next Hop"},
63:{"Name":"BPG_IPV6_NEXT_HOP", "Type":"IPv6", "Index ID":"BGP IPv6 Next Hop"},
64:{"Name":"IPV6_OPTION_HEADERS", "Type":"Integer", "Index ID":"IPv6 Option Headers"},
65:{"Name":"Vendor Proprietary", "Type":"Vendor Proprietary", "Index ID":"Vendor Proprietary"}, # Proprietary per Cisco
66:{"Name":"Vendor Proprietary", "Type":"Vendor Proprietary", "Index ID":"Vendor Proprietary"}, # Proprietary per Cisco
67:{"Name":"Vendor Proprietary", "Type":"Vendor Proprietary", "Index ID":"Vendor Proprietary"}, # Proprietary per Cisco
68:{"Name":"Vendor Proprietary", "Type":"Vendor Proprietary", "Index ID":"Vendor Proprietary"}, # Proprietary per Cisco
69:{"Name":"Vendor Proprietary", "Type":"Vendor Proprietary", "Index ID":"Vendor Proprietary"}, # Proprietary per Cisco
70:{"Name":"MPLS_LABEL_1", "Type":"MPLS Label", "Index ID":"MPLS Label 1"},
71:{"Name":"MPLS_LABEL_2", "Type":"MPLS Label", "Index ID":"MPLS Label 2"},
72:{"Name":"MPLS_LABEL_3", "Type":"MPLS Label", "Index ID":"MPLS Label 3"},
73:{"Name":"MPLS_LABEL_4", "Type":"MPLS Label", "Index ID":"MPLS Label 4"},
74:{"Name":"MPLS_LABEL_5", "Type":"MPLS Label", "Index ID":"MPLS Label 5"},
75:{"Name":"MPLS_LABEL_6", "Type":"MPLS Label", "Index ID":"MPLS Label 6"},
76:{"Name":"MPLS_LABEL_7", "Type":"MPLS Label", "Index ID":"MPLS Label 7"},
77:{"Name":"MPLS_LABEL_8", "Type":"MPLS Label", "Index ID":"MPLS Label 8"},
78:{"Name":"MPLS_LABEL_9", "Type":"MPLS Label", "Index ID":"MPLS Label 9"},
79:{"Name":"MPLS_LABEL_10", "Type":"MPLS Label", "Index ID":"MPLS Label 10"},
80:{"Name":"IN_DST_MAC", "Type":"MAC", "Index ID":"Incoming Destination MAC"},
81:{"Name":"OUT_SRC_MAC", "Type":"MAC", "Index ID":"Outgoing Source MAC"},
82:{"Name":"IF_NAME", "Type":"", "Index ID":"Interface Name"},
83:{"Name":"IF_DESC", "Type":"", "Index ID":"Interface Description"},
84:{"Name":"SAMPLER_NAME", "Type":"", "Index ID":"Sampler Name"},
85:{"Name":"IN_PERMANENT_BYTES", "Type":"Integer", "Index ID":"Permanent Flow Bytes"},
86:{"Name":"IN_PERMANENT_PKTS", "Type":"Integer", "Index ID":"Permanent Flow Packets"},
87:{"Name":"Vendor Proprietary", "Type":"Vendor Proprietary", "Index ID":"Vendor Proprietary"},
128:{"Name":"bgpNextAdjacentAsNumber", "Type":"Integer", "Index ID":"BGP Next Adjacent AS"},
129:{"Name":"bgpPrevAdjacentAsNumber", "Type":"Integer", "Index ID":"BGP Previous Adjacent AS"},
130:{"Name":"exporterIPv4Address", "Type":"IPv4", "Index ID":"Exporter IPv4 Address"},
131:{"Name":"exporterIPv6Address", "Type":"IPv6", "Index ID":"Exporter IPv6 Address"},
132:{"Name":"droppedOctetDeltaCount", "Type":"Integer", "Index ID":"Dropped Bytes"},
133:{"Name":"droppedPacketDeltaCount", "Type":"Integer", "Index ID":"Dropped Packets"},
134:{"Name":"droppedOctetTotalCount", "Type":"Integer", "Index ID":"Total Dropped Bytes"},
135:{"Name":"droppedPacketTotalCount", "Type":"Integer", "Index ID":"Total Dropped Packets"},
136:{
"Name":"flowEndReason",
"Type":"Integer",
"Index ID":"Flow End Reason",
"Options": {
1: "Idle Timeout",
2: "Active Timeout",
3: "End of Flow Detected",
4: "Forced End",
5: "Lack of Resources"
}
},
137:{"Name":"commonPropertiesId", "Type":"Integer", "Index ID":"Common Properties ID"},
138:{"Name":"observationPointId", "Type":"Integer", "Index ID":"Observation Point ID"},
139:{"Name":"icmpTypeCodeIPv6", "Type":"Integer", "Index ID":"IPv6 ICMP Type"}, # (ICMP type * 256) + ICMP code
140:{"Name":"mplsTopLabelIPv6Address", "Type":"IPv6", "Index ID":"MPLS Top Label IPv6 Address"},
141:{"Name":"lineCardId", "Type":"Integer", "Index ID":"Line Card ID"},
142:{"Name":"portId", "Type":"Integer", "Index ID":"Port ID"},
143:{"Name":"meteringProcessId", "Type":"Integer", "Index ID":"Metering Process ID"},
144:{"Name":"exportingProcessId", "Type":"Integer", "Index ID":"Exporting Process ID"},
145:{"Name":"templateId", "Type":"Integer", "Index ID":"Template ID"},
146:{"Name":"wlanChannelId", "Type":"Integer", "Index ID":"WLAN Channel ID"},
147:{"Name":"wlanSSID", "Type":"String", "Index ID":"WLAN SSID"},
148:{"Name":"flowId", "Type":"Integer", "Index ID":"Flow Identifier"}, # ASA
149:{"Name":"observationDomainId", "Type":"Integer", "Index ID":"Observation Domain ID"},
150:{"Name":"flowStartSeconds", "Type":"Integer", "Index ID":"Flow Start Seconds"},
151:{"Name":"flowEndSeconds", "Type":"Integer", "Index ID":"Flow End Seconds"},
152:{"Name":"flowStartMilliseconds", "Type":"Integer", "Index ID":"Flow Start Milliseconds"}, # ASA
153:{"Name":"flowEndMilliseconds", "Type":"Integer", "Index ID":"Flow End Milliseconds"},
154:{"Name":"flowStartMicroseconds", "Type":"Integer", "Index ID":"Flow Start Microseconds"},
155:{"Name":"flowEndMicroseconds", "Type":"Integer", "Index ID":"Flow End Microseconds"},
156:{"Name":"flowStartNanoseconds", "Type":"Integer", "Index ID":"Flow Start Nanoseconds"},
157:{"Name":"flowEndNanoseconds", "Type":"Integer", "Index ID":"Flow End Nanoseconds"},
158:{"Name":"flowStartDeltaMicroseconds", "Type":"Integer", "Index ID":"Flow Start Delta Microseconds"},
159:{"Name":"flowEndDeltaMicroseconds", "Type":"Integer", "Index ID":"Flow End Delta Microseconds"},
160:{"Name":"systemInitTimeMilliseconds", "Type":"Integer", "Index ID":"System Init Time Milliseconds"},
161:{"Name":"flowDurationMilliseconds", "Type":"Integer", "Index ID":"Flow Duration Milliseconds"},
162:{"Name":"flowDurationMicroseconds", "Type":"Integer", "Index ID":"Flow Duration Microseconds"},
163:{"Name":"observedFlowTotalCount", "Type":"Integer", "Index ID":"Observed Flow Total Count"},
164:{"Name":"ignoredPacketTotalCount", "Type":"Integer", "Index ID":"Ignored Packet Total Count"},
165:{"Name":"ignoredOctetTotalCount", "Type":"Integer", "Index ID":"Ignored Bytes Total Count"},
166:{"Name":"notSentFlowTotalCount", "Type":"Integer", "Index ID":"Not Sent Flow Total Count"},
167:{"Name":"notSentPacketTotalCount", "Type":"Integer", "Index ID":"Not Sent Packet Total Count"},
168:{"Name":"notSentOctetTotalCount", "Type":"Integer", "Index ID":"Not Sent Bytes Total Count"},
169:{"Name":"destinationIPv6Prefix", "Type":"IPv6", "Index ID":"Destination IPv6 Prefix"},
170:{"Name":"sourceIPv6Prefix", "Type":"IPv6", "Index ID":"Source IPv6 Prefix"},
171:{"Name":"postOctetTotalCount", "Type":"Integer", "Index ID":"Post Bytes Total Count"},
172:{"Name":"postPacketTotalCount", "Type":"Integer", "Index ID":"Post Packet Total Count"},
173:{"Name":"flowKeyIndicator", "Type":"Integer", "Index ID":"Flow Key Indicator"},
174:{"Name":"postMCastPacketTotalCount", "Type":"Integer", "Index ID":"Post-MCast Packet Total Count"},
175:{"Name":"postMCastOctetTotalCount", "Type":"Integer", "Index ID":"Post-MCast Bytes Total Count"},
176:{"Name":"icmpTypeIPv4", "Type":"Integer", "Index ID":"IPv4 ICMP Type"},
177:{"Name":"icmpCodeIPv4", "Type":"Integer", "Index ID":"IPv4 ICMP Code"},
178:{"Name":"icmpTypeIPv6", "Type":"Integer", "Index ID":"IPv6 ICMP Type"},
179:{"Name":"icmpCodeIPv6", "Type":"Integer", "Index ID":"IPv6 ICMP Code"},
180:{"Name":"udpSourcePort", "Type":"Integer", "Index ID":"UDP Source Port"},
181:{"Name":"udpDestinationPort", "Type":"Integer", "Index ID":"UDP Destination Port"},
182:{"Name":"tcpSourcePort", "Type":"Integer", "Index ID":"TCP Source Port"},
183:{"Name":"tcpDestinationPort", "Type":"Integer", "Index ID":"TCP Destination Port"},
184:{"Name":"tcpSequenceNumber", "Type":"Integer", "Index ID":"TCP Sequence Number"},
185:{"Name":"tcpAcknowledgementNumber", "Type":"Integer", "Index ID":"TCP Acknowledgement Number"},
186:{"Name":"tcpWindowSize", "Type":"Integer", "Index ID":"TCP Window Size"},
187:{"Name":"tcpUrgentPointer", "Type":"Integer", "Index ID":"TCP Urgent Pointer"},
188:{"Name":"tcpHeaderLength", "Type":"Integer", "Index ID":"TCP Header Length"},
189:{"Name":"ipHeaderLength", "Type":"Integer", "Index ID":"IP Header Length"},
190:{"Name":"totalLengthIPv4", "Type":"Integer", "Index ID":"Total Length IPv4"},
191:{"Name":"payloadLengthIPv6", "Type":"Integer", "Index ID":"Payload Length IPv6"},
192:{"Name":"ipTTL", "Type":"Integer", "Index ID":"IP TTL"},
193:{"Name":"nextHeaderIPv6", "Type":"Integer", "Index ID":"Next Header IPv6"},
194:{"Name":"mplsPayloadLength", "Type":"Integer", "Index ID":"MPLS Payload Length"},
195:{"Name":"ipDiffServCodePoint", "Type":"Integer", "Index ID":"IP Diff Serv Code Point"},
196:{"Name":"ipPrecedence", "Type":"Integer", "Index ID":"IP Precedence"},
197:{"Name":"fragmentFlags", "Type":"Integer", "Index ID":"Fragment Flags"},
198:{"Name":"octetDeltaSumOfSquares", "Type":"Integer", "Index ID":"Byte Delta Sum Of Squares"},
199:{"Name":"octetTotalSumOfSquares", "Type":"Integer", "Index ID":"Byte Total Sum Of Squares"},
200:{"Name":"mplsTopLabelTTL", "Type":"Integer", "Index ID":"MPLS Top Label TTL"},
201:{"Name":"mplsLabelStackLength", "Type":"Integer", "Index ID":"MPLS Label Stack Length"},
202:{"Name":"mplsLabelStackDepth", "Type":"Integer", "Index ID":"MPLS Label Stack Depth"},
203:{"Name":"mplsTopLabelExp", "Type":"Integer", "Index ID":"MPLS Top Label Exp"},
204:{"Name":"ipPayloadLength", "Type":"Integer", "Index ID":"IP Payload Length"},
205:{"Name":"udpMessageLength", "Type":"Integer", "Index ID":"UDP Message Length"},
206:{
"Name":"isMulticast",
"Type":"Integer",
"Index ID":"Is Multicast",
"Options": {
0:"False",
1:"True"
}
},
207:{"Name":"ipv4IHL", "Type":"Integer", "Index ID":"IPv4 IHL"},
208:{"Name":"ipv4Options", "Type":"Integer", "Index ID":"IPv4 Options"},
209:{"Name":"tcpOptions", "Type":"Integer", "Index ID":"TCP Options"},
210:{"Name":"paddingOctets", "Type":"Integer", "Index ID":"Padding Bytes"}, # REVIEW THIS!!!
211:{"Name":"collectorIPv4Address", "Type":"IPv4", "Index ID":"Collector IPv4 Address"},
212:{"Name":"collectorIPv6Address", "Type":"IPv6", "Index ID":"Collector IPv6 Address"},
213:{"Name":"exportInterface", "Type":"Integer", "Index ID":"Export Interface"},
214:{"Name":"exportProtocolVersion", "Type":"Integer", "Index ID":"Export Protocol Version"},
215:{"Name":"exportTransportProtocol", "Type":"Integer", "Index ID":"Export Transport Protocol"},
216:{"Name":"collectorTransportPort", "Type":"Integer", "Index ID":"Collector Transport Port"},
217:{"Name":"exporterTransportPort", "Type":"Integer", "Index ID":"Exporter Transport Port"},
218:{"Name":"tcpSynTotalCount", "Type":"Integer", "Index ID":"TCP Syn Total Count"},
219:{"Name":"tcpFinTotalCount", "Type":"Integer", "Index ID":"TCP Fin Total Count"},
220:{"Name":"tcpRstTotalCount", "Type":"Integer", "Index ID":"TCP Rst Total Count"},
221:{"Name":"tcpPshTotalCount", "Type":"Integer", "Index ID":"TCP Psh Total Count"},
222:{"Name":"tcpAckTotalCount", "Type":"Integer", "Index ID":"TCP Ack Total Count"},
223:{"Name":"tcpUrgTotalCount", "Type":"Integer", "Index ID":"TCP Urg Total Count"},
224:{"Name":"ipTotalLength", "Type":"Integer", "Index ID":"IP Total Length"},
225:{"Name":"postNATSourceIPv4Address", "Type":"IPv4", "Index ID":"Post-NAT Source IPv4"}, # Mikrotik, ASA
226:{"Name":"postNATDestinationIPv4Address", "Type":"IPv4", "Index ID":"Post-NAT Destination IPv4"}, # Mikrotik, ASA
227:{"Name":"postNAPTSourceTransportPort", "Type":"Integer", "Index ID":"Post-NAT Source Transport Port"}, # Mikrotik, ASA
228:{"Name":"postNAPTDestinationTransportPort", "Type":"Integer", "Index ID":"Post-NAT Destination Transport Port"}, # Mikrotik, ASA
229:{
"Name":"natOriginatingAddressRealm",
"Type":"Integer",
"Index ID":"NAT Originating Address Realm",
"Options": {
1: "Private",
2: "Public"
}
},
230:{
"Name":"natEvent",
"Type":"Integer",
"Index ID":"NAT Event",
"Options": {
1: "Create Event",
2: "Delete Event",
3: "Pool Exhausted"
}
},
231:{"Name":"initiatorOctets", "Type":"Integer", "Index ID":"Initiator Octets"}, # ASA
232:{"Name":"responderOctets", "Type":"Integer", "Index ID":"Responder Octets"}, # ASA
233:{
"Name":"firewallEvent",
"Type":"Integer",
"Index ID":"Event Code",
"Options": {
0: "Ignore",
1: "Flow Created",
2: "Flow Deleted",
3: "Flow Denied",
4: "Flow Alert",
5: "Flow Update"
}
},
234:{"Name":"ingressVRFID", "Type":"Integer", "Index ID":"Ingress VRFID"},
235:{"Name":"egressVRFID", "Type":"Integer", "Index ID":"Egress VRFID"},
236:{"Name":"VRFname", "Type":"String", "Index ID":"VRF Name"},
237:{"Name":"postMplsTopLabelExp", "Type":"Integer", "Index ID":"Post-MPLS Top Label Exp"},
238:{"Name":"tcpWindowScale", "Type":"Integer", "Index ID":"TCP Window Scale"},
239:{
"Name":"biflowDirection",
"Type":"Integer",
"Index ID":"Bi-Flow Direction",
"Options": {
0: "Arbitrary",
1: "Initiator",
2: "Reverse Initiator",
3: "Perimeter"
}
},
240:{"Name":"ethernetHeaderLength", "Type":"Integer", "Index ID":"Ethernet Header Length"},
241:{"Name":"ethernetPayloadLength", "Type":"Integer", "Index ID":"Ethernet Payload Length"},
242:{"Name":"ethernetTotalLength", "Type":"Integer", "Index ID":"Ethernet Total Length"},
243:{"Name":"dot1qVlanId", "Type":"Integer", "Index ID":"Dot-1q VLAN ID"},
244:{"Name":"dot1qPriority", "Type":"Integer", "Index ID":"Dot-1q Priority"},
245:{"Name":"dot1qCustomerVlanId", "Type":"Integer", "Index ID":"Dot-1q Customer VLAN ID"},
246:{"Name":"dot1qCustomerPriority", "Type":"Integer", "Index ID":"Dot-1q Customer Priority"},
247:{"Name":"metroEvcId", "Type":"String", "Index ID":"Metro EVC ID"},
248:{"Name":"metroEvcType", "Type":"Integer", "Index ID":"Metro EVC Type"},
249:{"Name":"pseudoWireId", "Type":"Integer", "Index ID":"Pseudo-Wire ID"},
250:{"Name":"pseudoWireType", "Type":"Integer", "Index ID":"Pseudo-Wire Type"},
251:{"Name":"pseudoWireControlWord", "Type":"Integer", "Index ID":"Pseudo-Wire Control Word"},
252:{"Name":"ingressPhysicalInterface", "Type":"Integer", "Index ID":"Ingress Physical Interface"},
253:{"Name":"egressPhysicalInterface", "Type":"Integer", "Index ID":"Egress Physical Interface"},
254:{"Name":"postDot1qVlanId", "Type":"Integer", "Index ID":"Post-Dot1q VLAN ID"},
255:{"Name":"postDot1qCustomerVlanId", "Type":"Integer", "Index ID":"Post-Dot1q Customer VLAN ID"},
256:{"Name":"ethernetType", "Type":"Integer", "Index ID":"Ethernet Type"},
257:{"Name":"postIpPrecedence", "Type":"Integer", "Index ID":"Post-IP Precedence"},
258:{"Name":"collectionTimeMilliseconds", "Type":"Integer", "Index ID":"Collection Time Milliseconds"},
259:{"Name":"exportSctpStreamId", "Type":"Integer", "Index ID":"Export SCTP Stream ID"},
260:{"Name":"maxExportSeconds", "Type":"Integer", "Index ID":"Max Export Seconds"},
261:{"Name":"maxFlowEndSeconds", "Type":"Integer", "Index ID":"Max Flow End Seconds"},
262:{"Name":"messageMD5Checksum", "Type":"Integer", "Index ID":"Message MD5 Checksum"},
263:{"Name":"messageScope", "Type":"Integer", "Index ID":"Message Scope"},
264:{"Name":"minExportSeconds", "Type":"Integer", "Index ID":"Min Export Seconds"},
265:{"Name":"minFlowStartSeconds", "Type":"Integer", "Index ID":"Min Flow Start Seconds"},
266:{"Name":"opaqueOctets", "Type":"", "Index ID":"Opaque Octets"},
267:{"Name":"sessionScope", "Type":"Integer", "Index ID":"Session Scope"},
268:{"Name":"maxFlowEndMicroseconds", "Type":"Integer", "Index ID":"Max Flow End Microseconds"},
269:{"Name":"maxFlowEndMilliseconds", "Type":"Integer", "Index ID":"Max Flow End Milliseconds"},
270:{"Name":"maxFlowEndNanoseconds", "Type":"Integer", "Index ID":"Max Flow End Nanoseconds"},
271:{"Name":"minFlowStartMicroseconds", "Type":"Integer", "Index ID":"Min Flow Start Microseconds"},
272:{"Name":"minFlowStartMilliseconds", "Type":"Integer", "Index ID":"Min Flow Start Milliseconds"},
273:{"Name":"minFlowStartNanoseconds", "Type":"Integer", "Index ID":"Min Flow Start Nanoseconds"},
274:{"Name":"collectorCertificate", "Type":"", "Index ID":"Collector Certificate"},
275:{"Name":"exporterCertificate", "Type":"", "Index ID":"Exporter Certificate"},
276:{"Name":"dataRecordsReliability", "Type":"", "Index ID":"Data Records Reliability"},
277:{
"Name":"observationPointType",
"Type":"Integer",
"Index ID":"Observation Point Type",
"Options": {
1: "Physical Port",
2: "Port Channel",
3: "VLAN"
}
},
278:{"Name":"newConnectionDeltaCount", "Type":"Integer", "Index ID":"New Connection Delta Count"},
279:{"Name":"connectionSumDurationSeconds", "Type":"Integer", "Index ID":"Connection Sum Duration Seconds"},
280:{"Name":"connectionTransactionId", "Type":"Integer", "Index ID":"Connection Transaction ID"},
281:{"Name":"postNATSourceIPv6Address", "Type":"IPv6", "Index ID":"Post-NAT IPv6 Source"}, # ASA
282:{"Name":"postNATDestinationIPv6Address", "Type":"IPv6", "Index ID":"Post-NAT IPv6 Destination"},
283:{"Name":"natPoolId", "Type":"Integer", "Index ID":"NAT Pool ID"},
284:{"Name":"natPoolName", "Type":"String", "Index ID":"NAT Pool Name"},
285:{"Name":"anonymizationFlags", "Type":"Integer", "Index ID":"Anonymization Flags"}, # REVIEW THIS
286:{
"Name":"anonymizationTechnique",
"Type":"Integer",
"Index ID":"Anonymization Technique",
"Options": {
0: "Undefined",
1: "None",
2: "Precision Degradation",
3: "Binning",
4: "Enumeration",
5: "Permutation",
6: "Structured Permutation",
7: "Reverse Truncation",
8: "Noise",
9: "Offset"
}
},
287:{"Name":"informationElementIndex", "Type":"Integer", "Index ID":"Information Element Index"},
288:{"Name":"p2pTechnology", "Type":"String", "Index ID":"P2P Technology"},
289:{"Name":"tunnelTechnology", "Type":"String", "Index ID":"Tunnel Technology"},
290:{"Name":"encryptedTechnology", "Type":"String", "Index ID":"Encrypted Technology"},
291:{"Name":"basicList", "Type":"", "Index ID":"Basic List"},
292:{"Name":"subTemplateList", "Type":"", "Index ID":"Sub-Template List"},
293:{"Name":"subTemplateMultiList", "Type":"", "Index ID":"Sub-Template MultiList"},
294:{"Name":"bgpValidityState", "Type":"Integer", "Index ID":"BGP Validity State"},
295:{"Name":"IPSecSPI", "Type":"Integer", "Index ID":"IPSEC SPI"},
296:{"Name":"greKey", "Type":"Integer", "Index ID":"GRE Key"},
297:{
"Name":"natType",
"Type":"Integer",
"Index ID":"NAT Type",
"Options": {
0: "Unknown",
1: "NAT44 Translated",
2: "NAT64 Translated",
3: "NAT46 Translated",
4: "IPv4 to IPv4",
5: "NAT66 Translated",
6: "IPv6 to IPv6"
}
},
298:{"Name":"initiatorPackets", "Type":"Integer", "Index ID":"Initiator Packets"},
299:{"Name":"responderPackets", "Type":"Integer", "Index ID":"Responder Packets"},
300:{"Name":"observationDomainName", "Type":"String", "Index ID":"Observation Domain Name"},
301:{"Name":"selectionSequenceId", "Type":"Integer", "Index ID":"Selection Sequence ID"},
302:{"Name":"selectorId", "Type":"Integer", "Index ID":"Selector ID"},
303:{"Name":"informationElementId", "Type":"Integer", "Index ID":"Information Element ID"},
304:{"Name":"selectorAlgorithm", "Type":"Integer", "Index ID":"Selector Algorithm"},
305:{"Name":"samplingPacketInterval", "Type":"Integer", "Index ID":"Sampling Packet Interval"},
306:{"Name":"samplingPacketSpace", "Type":"Integer", "Index ID":"Sampling Packet Space"},
307:{"Name":"samplingTimeInterval", "Type":"Integer", "Index ID":"Sampling Time Interval"},
308:{"Name":"samplingTimeSpace", "Type":"Integer", "Index ID":"Sampling Time Space"},
309:{"Name":"samplingSize", "Type":"Integer", "Index ID":"Sampling Size"},
310:{"Name":"samplingPopulation", "Type":"Integer", "Index ID":"Sampling Population"},
311:{"Name":"samplingProbability", "Type":"Float", "Index ID":"Sampling Probability"},
312:{"Name":"dataLinkFrameSize", "Type":"Integer", "Index ID":"Data Link Frame Size"},
313:{"Name":"ipHeaderPacketSection", "Type":"", "Index ID":"IP Header Packet Section"},
314:{"Name":"ipPayloadPacketSection", "Type":"", "Index ID":"IP Payload Packet Section"},
315:{"Name":"dataLinkFrameSection", "Type":"", "Index ID":"Data Link Frame Section"},
316:{"Name":"mplsLabelStackSection", "Type":"", "Index ID":"MPLS Label Stack Section"},
317:{"Name":"mplsPayloadPacketSection", "Type":"", "Index ID":"MPLS Payload Packet Section"},
318:{"Name":"selectorIdTotalPktsObserved", "Type":"Integer", "Index ID":"Selector ID Total Packets Observed"},
319:{"Name":"selectorIdTotalPktsSelected", "Type":"Integer", "Index ID":"Selector ID Total Packets Selected"},
320:{"Name":"absoluteError", "Type":"Float", "Index ID":"Absolute Error"},
321:{"Name":"relativeError", "Type":"Float", "Index ID":"Relative Error"},
322:{"Name":"observationTimeSeconds", "Type":"Integer", "Index ID":"Observation Time Seconds"},
323:{"Name":"observationTimeMilliseconds", "Type":"Integer", "Index ID":"Observation Time Milliseconds"}, # ASA
324:{"Name":"observationTimeMicroseconds", "Type":"Integer", "Index ID":"Observation Time Microseconds"},
325:{"Name":"observationTimeNanoseconds", "Type":"Integer", "Index ID":"Observation Time Nanoseconds"},
326:{"Name":"digestHashValue", "Type":"Integer", "Index ID":"Digest Hash Value"}, # Huawei
327:{"Name":"hashIPPayloadOffset", "Type":"Integer", "Index ID":"Hash IP Payload Offset"},
328:{"Name":"hashIPPayloadSize", "Type":"Integer", "Index ID":"Hash IP Payload Size"},
329:{"Name":"hashOutputRangeMin", "Type":"Integer", "Index ID":"Hash Output Range Min"},
330:{"Name":"hashOutputRangeMax", "Type":"Integer", "Index ID":"Hash Output Range Max"},
331:{"Name":"hashSelectedRangeMin", "Type":"Integer", "Index ID":"Hash Selected Range Min"},
332:{"Name":"hashSelectedRangeMax", "Type":"Integer", "Index ID":"Hash Selected Range Max"},
333:{"Name":"hashDigestOutput", "Type":"Boolean", "Index ID":"Hash Digest Output"}, # Boolean
334:{"Name":"hashInitialiserValue", "Type":"Integer", "Index ID":"Hash Initialiser Value"},
335:{"Name":"selectorName", "Type":"String", "Index ID":"Selector Name"},
336:{"Name":"upperCILimit", "Type":"Float", "Index ID":"Upper CI Limit"},
337:{"Name":"lowerCILimit", "Type":"Float", "Index ID":"Lower CI Limit"},
338:{"Name":"confidenceLevel", "Type":"Float", "Index ID":"Confidence Level"},
339:{"Name":"informationElementDataType", "Type":"Integer", "Index ID":"Information Element Data Type"},
340:{"Name":"informationElementDescription", "Type":"String", "Index ID":"Information Element Description"},
341:{"Name":"informationElementName", "Type":"String", "Index ID":"Information Element Name"},
342:{"Name":"informationElementRangeBegin", "Type":"Integer", "Index ID":"Information Element Range Begin"},
343:{"Name":"informationElementRangeEnd", "Type":"Integer", "Index ID":"Information Element Range End"},
344:{"Name":"informationElementSemantics", "Type":"Integer", "Index ID":"Information ElementSemantics"},
345:{"Name":"informationElementUnits", "Type":"Integer", "Index ID":"Information Element Units"},
346:{"Name":"privateEnterpriseNumber", "Type":"Integer", "Index ID":"Private Enterprise Number"},
347:{"Name":"virtualStationInterfaceId", "Type":"", "Index ID":"Virtual Station Interface ID"},
348:{"Name":"virtualStationInterfaceName", "Type":"String", "Index ID":"Virtual Station Interface Name"},
349:{"Name":"virtualStationUUID", "Type":"", "Index ID":"Virtual Station UUID"},
350:{"Name":"virtualStationName", "Type":"String", "Index ID":"Virtual Station Name"},
351:{"Name":"layer2SegmentId", "Type":"Integer", "Index ID":"Layer 2 Segment ID"},
352:{"Name":"layer2OctetDeltaCount", "Type":"Integer", "Index ID":"Layer 2 Byte Count"},
353:{"Name":"layer2OctetTotalCount", "Type":"Integer", "Index ID":"Layer 2 Byte Total Count"},
354:{"Name":"ingressUnicastPacketTotalCount", "Type":"Integer", "Index ID":"Ingress Unicast Packet Total Count"},
355:{"Name":"ingressMulticastPacketTotalCount", "Type":"Integer", "Index ID":"Ingress Multicast Packet Total Count"},
356:{"Name":"ingressBroadcastPacketTotalCount", "Type":"Integer", "Index ID":"Ingress Broadcast Packet Total Count"},
357:{"Name":"egressUnicastPacketTotalCount", "Type":"Integer", "Index ID":"Egress Unicast Packet Total Count"},
358:{"Name":"egressBroadcastPacketTotalCount", "Type":"Integer", "Index ID":"Egress Broadcast Packet Total Count"},
359:{"Name":"monitoringIntervalStartMilliSeconds", "Type":"Integer", "Index ID":"Monitoring Interval Start MilliSeconds"},
360:{"Name":"monitoringIntervalEndMilliSeconds", "Type":"Integer", "Index ID":"Monitoring Interval End MilliSeconds"},
361:{"Name":"portRangeStart", "Type":"Integer", "Index ID":"Port Range Start"},
362:{"Name":"portRangeEnd", "Type":"Integer", "Index ID":"Port Range End"},
363:{"Name":"portRangeStepSize", "Type":"Integer", "Index ID":"Port Range Step Size"},
364:{"Name":"portRangeNumPorts", "Type":"Integer", "Index ID":"Port Range Num Ports"},
365:{"Name":"staMacAddress", "Type":"MAC", "Index ID":"Station MAC Address"},
366:{"Name":"staIPv4Address", "Type":"IPv4", "Index ID":"Station IPv4 Address"},
367:{"Name":"wtpMacAddress", "Type":"MAC", "Index ID":"WTP MAC Address"},
368:{"Name":"ingressInterfaceType", "Type":"Integer", "Index ID":"Ingress Interface Type"},
369:{"Name":"egressInterfaceType", "Type":"Integer", "Index ID":"Egress Interface Type"},
370:{"Name":"rtpSequenceNumber", "Type":"Integer", "Index ID":"RTP Sequence Number"},
371:{"Name":"userName", "Type":"String", "Index ID":"User Name"},
372:{"Name":"applicationCategoryName", "Type":"String", "Index ID":"Application Category Name"},
373:{"Name":"applicationSubCategoryName", "Type":"String", "Index ID":"Application Subcategory Name"},
374:{"Name":"applicationGroupName", "Type":"String", "Index ID":"Application Group Name"},
375:{"Name":"originalFlowsPresent", "Type":"Integer", "Index ID":"Original Flows Present"},
376:{"Name":"originalFlowsInitiated", "Type":"Integer", "Index ID":"Original Flows Initiated"},
377:{"Name":"originalFlowsCompleted", "Type":"Integer", "Index ID":"Original Flows Completed"},
378:{"Name":"distinctCountOfSourceIPAddress", "Type":"Integer", "Index ID":"Distinct Count Of Source IP Address"},
379:{"Name":"distinctCountOfDestinationIPAddress", "Type":"Integer", "Index ID":"Distinct Count Of Destination IP Address"},
380:{"Name":"distinctCountOfSourceIPv4Address", "Type":"Integer", "Index ID":"Distinct Count Of Source IPv4 Address"},
381:{"Name":"distinctCountOfDestinationIPv4Address", "Type":"Integer", "Index ID":"Distinct Count Of Destination IPv4 Address"},
382:{"Name":"distinctCountOfSourceIPv6Address", "Type":"Integer", "Index ID":"Distinct Count Of Source IPv6 Address"},
383:{"Name":"distinctCountOfDestinationIPv6Address", "Type":"Integer", "Index ID":"Distinct Count Of Destination IPv6 Address"},
384:{
"Name":"valueDistributionMethod",
"Type":"Integer",
"Index ID":"Distribution Method",
"Options": {
0: "Unspecified",
1: "Start Interval",
2: "End Interval",
3: "Mid Interval",
4: "Simple Uniform Distribution",
5: "Proportional Uniform Distribution",
6: "Simulated Process",
7: "Direct"
}
},
385:{"Name":"rfc3550JitterMilliseconds", "Type":"Integer", "Index ID":"Jitter Milliseconds"},
386:{"Name":"rfc3550JitterMicroseconds", "Type":"Integer", "Index ID":"Jitter Microseconds"},
387:{"Name":"rfc3550JitterNanoseconds", "Type":"Integer", "Index ID":"Jitter Nanoseconds"},
388:{"Name":"dot1qDEI", "Type":"Boolean", "Index ID":"Dot1q DEI"},
389:{"Name":"dot1qCustomerDEI", "Type":"Boolean", "Index ID":"Dot1q Customer DEI"},
390:{
"Name":"flowSelectorAlgorithm",
"Type":"Integer",
"Index ID":"Flow Selector Algorithm",
"Options": {
0: "Unassigned",
1: "Systematic Count-based Sampling",
2: "Systematic Time-based Sampling",
3: "Random N-out-of-N Sampling",
4: "Uniform Probabilistic Sampling",
5: "Property Match Filtering",
6: "Hash-based Filtering using BOB",
7: "Hash-based Filtering using IPSX",
8: "Hash-based Filtering using CRC",
9: "Flow-state Dependent Intermediate Flow Selection Process"
}
},
391:{"Name":"flowSelectedOctetDeltaCount", "Type":"Integer", "Index ID":"Flow Selected Byte Count"},
392:{"Name":"flowSelectedPacketDeltaCount", "Type":"Integer", "Index ID":"Flow Selected Packet Count"},
393:{"Name":"flowSelectedFlowDeltaCount", "Type":"Integer", "Index ID":"Flow Selected Flow Count"},
394:{"Name":"selectorIDTotalFlowsObserved", "Type":"Integer", "Index ID":"Selector ID Total Flows Observed"},
395:{"Name":"selectorIDTotalFlowsSelected", "Type":"Integer", "Index ID":"Selector ID Total Flows Selected"},
396:{"Name":"samplingFlowInterval", "Type":"Integer", "Index ID":"Sampling Flow Interval"},
397:{"Name":"samplingFlowSpacing", "Type":"Integer", "Index ID":"Sampling Flow Spacing"},
398:{"Name":"flowSamplingTimeInterval", "Type":"Integer", "Index ID":"Flow Sampling Time Interval"},
399:{"Name":"flowSamplingTimeSpacing", "Type":"Integer", "Index ID":"Flow Sampling Time Spacing"},
400:{"Name":"hashFlowDomain", "Type":"Integer", "Index ID":"Hash Flow Domain"},
401:{"Name":"transportOctetDeltaCount", "Type":"Integer", "Index ID":"Transport Byte Count"},
402:{"Name":"transportPacketDeltaCount", "Type":"Integer", "Index ID":"Transport Packet Count"},
403:{"Name":"originalExporterIPv4Address", "Type":"IPv4", "Index ID":"Original Exporter IPv4 Address"},
404:{"Name":"originalExporterIPv6Address", "Type":"IPv6", "Index ID":"Original Exporter IPv6 Address"},
405:{"Name":"originalObservationDomainId", "Type":"Integer", "Index ID":"Original Observation Domain ID"},
406:{"Name":"intermediateProcessId", "Type":"Integer", "Index ID":"Intermediate Process ID"},
407:{"Name":"ignoredDataRecordTotalCount", "Type":"Integer", "Index ID":"Ignored Data Record Total Count"},
408:{
"Name":"dataLinkFrameType",
"Type":"Integer",
"Index ID":"Data Link Frame Type",
"Options": {
1: "802.3 Ethernet",
2: "802.11 MAC Frame"
}
},
409:{"Name":"sectionOffset", "Type":"Integer", "Index ID":"Section Offset"},
410:{"Name":"sectionExportedOctets", "Type":"Integer", "Index ID":"Section Exported Bytes"},
411:{"Name":"dot1qServiceInstanceTag", "Type":"", "Index ID":"Dot1q Service Instance Tag"},
412:{"Name":"dot1qServiceInstanceId", "Type":"Integer", "Index ID":"Dot1q Service Instance ID"},
413:{"Name":"dot1qServiceInstancePriority", "Type":"Integer", "Index ID":"Dot1q Service Instance Priority"},
414:{"Name":"dot1qCustomerSourceMacAddress", "Type":"MAC", "Index ID":"Dot1q Customer Source MAC Address"},
415:{"Name":"dot1qCustomerDestinationMacAddress", "Type":"MAC", "Index ID":"Dot1q Customer Destination MAC Address"},
416:{"Name":"deprecated", "Type":"Deprecated", "Index ID":"Deprecated"}, # Deprecated per standard
417:{"Name":"postLayer2OctetDeltaCount", "Type":"Integer", "Index ID":"Post-Layer 2 Byte Count"},
418:{"Name":"postMCastLayer2OctetDeltaCount", "Type":"Integer", "Index ID":"Post-Multicast Layer 2 Bytes"},
419:{"Name":"deprecated", "Type":"Deprecated", "Index ID":"Deprecated"}, # Deprecated per standard
420:{"Name":"postLayer2Octet Total Count", "Type":"Integer", "Index ID":"Post-Layer 2 Total Bytes"},
421:{"Name":"postMCastLayer2Octet Total Count", "Type":"Integer", "Index ID":"Post-Multicast Layer 2 Total Bytes"},
422:{"Name":"minimumLayer2TotalLength", "Type":"Integer", "Index ID":"Minimum Layer 2 Total Length"},
423:{"Name":"maximumLayer2TotalLength", "Type":"Integer", "Index ID":"Maximum Layer 2 Total Length"},
424:{"Name":"droppedLayer2OctetDeltaCount", "Type":"Integer", "Index ID":"Dropped Layer 2 Bytes"},
425:{"Name":"droppedLayer2OctetTotalCount", "Type":"Integer", "Index ID":"Dropped Layer 2 Total Bytes"},
426:{"Name":"ignoredLayer2OctetTotalCount", "Type":"Integer", "Index ID":"Ignored Layer 2 Total Bytes"},
427:{"Name":"notSentLayer2OctetTotalCount", "Type":"Integer", "Index ID":"Not Sent Layer 2 Total Bytes"},
428:{"Name":"layer2OctetDeltaSumOfSquares", "Type":"Integer", "Index ID":"Layer 2 Bytes Delta Sum Of Squares"},
429:{"Name":"layer2OctetTotalSumOfSquares", "Type":"Integer", "Index ID":"Layer 2 Bytes Total Sum Of Squares"},
430:{"Name":"layer2FrameDeltaCount", "Type":"Integer", "Index ID":"Layer 2 Frame Delta Count"},
431:{"Name":"layer2Frame Total Count", "Type":"Integer", "Index ID":"Layer 2 Frame Total Count"},
432:{"Name":"pseudoWireDestinationIPv4Address", "Type":"IPv4", "Index ID":"pseudoWireDestinationIPv4Address"},
433:{"Name":"ignoredLayer2FrameTotalCount", "Type":"Integer", "Index ID":"ignoredLayer2Frame Total Count"},
434:{"Name":"mibObjectValueInteger", "Type":"Integer", "Index ID":"MIB ObjectValueInteger"},
435:{"Name":"mibObjectValueOctetString", "Type":"String", "Index ID":"MIB ObjectValueOctetString"},
436:{"Name":"mibObjectValueOID", "Type":"", "Index ID":"MIB ObjectValueOID"},
437:{"Name":"mibObjectValueBits", "Type":"", "Index ID":"MIB ObjectValueBits"},
438:{"Name":"mibObjectValueIPAddress", "Type":"IPv4", "Index ID":"MIB ObjectValueIPAddress"},
439:{"Name":"mibObjectValueCounter", "Type":"Integer", "Index ID":"MIB ObjectValueCounter"},
440:{"Name":"mibObjectValueGauge", "Type":"Integer", "Index ID":"MIB ObjectValueGauge"},
441:{"Name":"mibObjectValueTimeTicks", "Type":"Integer", "Index ID":"MIB ObjectValueTimeTicks"},
442:{"Name":"mibObjectValueUnsigned", "Type":"Integer", "Index ID":"MIB ObjectValueUnsigned"},
443:{"Name":"mibObjectValueTable", "Type":"", "Index ID":"MIB ObjectValueTable"}, # Options Template for an SNMP MIB
444:{"Name":"mibObjectValueRow", "Type":"", "Index ID":"MIB ObjectValueRow"}, # Options Template for an SNMP MIB
445:{"Name":"mibObjectIdentifier", "Type":"", "Index ID":"MIB ObjectIdentifier"},
446:{"Name":"mibSubIdentifier", "Type":"Integer", "Index ID":"MIB SubIdentifier"},
447:{"Name":"mibIndexIndicator", "Type":"Integer", "Index ID":"MIB IndexIndicator"},
448:{
"Name":"mibCaptureTimeSemantics",
"Type":"Integer",
"Index ID":"MIB CaptureTimeSemantics",
"Options": {
0: "Undefined",
1: "Begin",
2: "End",
3: "Export",
4: "Average"
}
},
449:{"Name":"mibContextEngineID", "Type":"", "Index ID":"MIB ContextEngineID"},
450:{"Name":"mibContextName", "Type":"String", "Index ID":"MIB ContextName"},
451:{"Name":"mibObjectName", "Type":"String", "Index ID":"MIB ObjectName"},
452:{"Name":"mibObjectDescription", "Type":"String", "Index ID":"MIB ObjectDescription"},
453:{"Name":"mibObjectSyntax", "Type":"String", "Index ID":"MIB ObjectSyntax"},
454:{"Name":"mibModuleName", "Type":"String", "Index ID":"MIB ModuleName"},
455:{"Name":"mobileIMSI", "Type":"String", "Index ID":"Mobile IMSI"},
456:{"Name":"mobileMSISDN", "Type":"String", "Index ID":"Mobile MSISDN"},
#33000:{"Name":"INGRESS_ACL_ID", "Type":"", "Index ID":"Ingress ACL ID"}, # ASA (Proprietary)
#33001:{"Name":"EGRESS_ACL_ID", "Type":"", "Index ID":"Egress ACL ID"}, # ASA (Proprietary)
#33002:{"Name":"NF_F_FW_EXT_EVENT", "Type":"Integer", "Index ID":"Firewall External Event"}, # ASA (Proprietary)
#40000:{"Name":"AAA_USERNAME", "Type":"", "Index ID":"AAA Username"} # ASA (Proprietary)
}
# Types of IPFIX (Netflow v10) fields, per http://www.iana.org/assignments/ipfix/ipfix.xhtml
ipfix_fields = {
1:{"Name":"octetDeltaCount", "Type":"Integer", "Index ID":"Bytes In"},
2:{"Name":"packetDeltaCount", "Type":"Integer", "Index ID":"Packets In"},
3:{"Name":"deltaFlowCount", "Type":"Integer", "Index ID":"Flows"},
4:{
"Name":"protocolIdentifier",
"Type":"Integer",
"Index ID":"Protocol",
"Options": {
0:'HOPOPT',
1:'ICMP',
2:'IGMP',
3:'GGP',
4:'IP-in-IP',
5:'ST',
6:'TCP',
7:'CBT',
8:'EGP',
9:'IGP',
10:'BBN-RCC-MON',
11:'NVP-II',
12:'PUP',
13:'ARGUS',
14:'EMCON',
15:'XNET',
16:'CHAOS',
17:'UDP',
18:'MUX',
19:'DCN-MEAS',
20:'HMP',
21:'PRM',
22:'XNS-IDP',
23:'TRUNK-1',
24:'TRUNK-2',
25:'LEAF-1',
26:'LEAF-2',
27:'RDP',
28:'IRTP',
29:'ISO-TP4',
30:'NETBLT',
31:'MFE-NSP',
32:'MERIT-INP',
33:'DCCP',
34:'3PC',
35:'IDPR',
36:'XTP',
37:'DDP',
38:'IDPR-CMTP',
39:'TP++',
40:'IL',
41:'IPv6 6in4',
42:'SDRP',
43:'IPv6 Routing',
44:'IPv6 Fragment',
45:'IDRP',
46:'RSVP',
47:'GRE',
48:'DSR',
49:'BNA',
50:'ESP',
51:'AH',
52:'I-NLSP',
53:'SWIPE',
54:'NARP',
55:'IP Mobility',
56:'TLSP',
57:'SKIP',
58:'IPv6 ICMP',
59:'IPv6 NoNxt',
60:'IPv6 Options',
61:'Host Internal Protocol',
62:'CFTP',
63:'Local Network',
64:'SAT-EXPAK',
65:'KRYPTOLAN',
66:'RVD',
67:'IPPC',
68:'Distributed File System',
69:'SAT-MON',
70:'VISA',
71:'IPCV',
72:'CPNX',
73:'CPHB',
74:'WSN',
75:'PVP',
76:'BR-SAT-MON',
77:'SUN-ND',
78:'WB-MON',
79:'WB-EXPAK',
80:'ISO-IP',
81:'VMTP',
82:'SECURE-VMTP',
83:'VINES',
84:'TTP / IPTM',
85:'NSFNET-IGP',
86:'DGP',
87:'TCF',
88:'EIGRP',
89:'OSPF',
90:'Sprite-RPC',
91:'LARP',
92:'MTP',
93:'AX.25',
94:'IPIP',
95:'MICP ',
96:'SCC-SP',
97:'ETHERIP',
98:'ENCAP',
99:'Private Encryption Scheme',
100:'GMTP',
101:'IFMP',
102:'PNNI',
103:'PIM',
104:'ARIS',
105:'SCPS',
106:'QNX',
107:'A/N',
108:'IPComp',
109:'SNP',
110:'Compaq-Peer',
111:'IPX-in-IP',
112:'VRRP',
113:'PGM',
114:'0-Hop Protocol',
115:'L2TP',
116:'DDX',
117:'IATP',
118:'STP',
119:'SRP',
120:'UTI',
121:'SMP',
122:'SM',
123:'PTP',
124:'ISIS over IPv4',