-
Notifications
You must be signed in to change notification settings - Fork 2
Expand file tree
/
Copy pathnetflow.yaml
More file actions
453 lines (453 loc) · 4.8 KB
/
Copy pathnetflow.yaml
File metadata and controls
453 lines (453 loc) · 4.8 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
---
1:
- 4
- :in_bytes
2:
- 4
- :in_pkts
3:
- 4
- :flows
4:
- :uint8
- :protocol
5:
- :uint8
- :src_tos
6:
- :uint8
- :tcp_flags
7:
- :uint16
- :l4_src_port
8:
- :ip4_addr
- :ipv4_src_addr
9:
- :uint8
- :src_mask
10:
- 2
- :input_snmp
11:
- :uint16
- :l4_dst_port
12:
- :ip4_addr
- :ipv4_dst_addr
13:
- :uint8
- :dst_mask
14:
- 2
- :output_snmp
15:
- :ip4_addr
- :ipv4_next_hop
16:
- 2
- :src_as
17:
- 2
- :dst_as
18:
- :ip4_addr
- :bgp_ipv4_next_hop
19:
- 4
- :mul_dst_pkts
20:
- 4
- :mul_dst_bytes
21:
- :uint32
- :last_switched
22:
- :uint32
- :first_switched
23:
- 4
- :out_bytes
24:
- 4
- :out_pkts
25:
- :uint16
- :min_pkt_length
26:
- :uint16
- :max_pkt_length
27:
- :ip6_addr
- :ipv6_src_addr
28:
- :ip6_addr
- :ipv6_dst_addr
29:
- :uint8
- :ipv6_src_mask
30:
- :uint8
- :ipv6_dst_mask
31:
- :uint24
- :ipv6_flow_label
32:
- :uint16
- :icmp_type
33:
- :uint8
- :mul_igmp_type
34:
- :uint32
- :sampling_interval
35:
- :uint8
- :sampling_algorithm
36:
- :uint16
- :flow_active_timeout
37:
- :uint16
- :flow_inactive_timeout
38:
- :uint8
- :engine_type
39:
- :uint8
- :engine_id
40:
- 4
- :total_bytes_exp
41:
- 4
- :total_pkts_exp
42:
- 4
- :total_flows_exp
43:
- :skip
44:
- :ip4_addr
- :ipv4_src_prefix
45:
- :ip4_addr
- :ipv4_dst_prefix
46:
- :uint8
- :mpls_top_label_type
47:
- :uint32
- :mpls_top_label_ip_addr
48:
- 4
- :flow_sampler_id
49:
- :uint8
- :flow_sampler_mode
50:
- :uint32
- :flow_sampler_random_interval
51:
- :skip
52:
- :uint8
- :min_ttl
53:
- :uint8
- :max_ttl
54:
- :uint16
- :ipv4_ident
55:
- :uint8
- :dst_tos
56:
- :mac_addr
- :in_src_mac
57:
- :mac_addr
- :out_dst_mac
58:
- :uint16
- :src_vlan
59:
- :uint16
- :dst_vlan
60:
- :uint8
- :ip_protocol_version
61:
- :uint8
- :direction
62:
- :ip6_addr
- :ipv6_next_hop
63:
- :ip6_addr
- :bgp_ipv6_next_hop
64:
- :uint32
- :ipv6_option_headers
65:
- :skip
66:
- :skip
67:
- :skip
68:
- :skip
69:
- :skip
80:
- :mac_addr
- :in_dst_mac
81:
- :mac_addr
- :out_src_mac
82:
- :string
- :if_name
83:
- :string
- :if_desc
84:
- :string
- :sampler_name
85:
- :uint32
- :in_permanent_bytes
86:
- :uint32
- :in_permanent_pkts
89:
- :forwarding_status
- :forwarding_status
94:
- :string
- :application_description
95:
- :application_id
- :application_id
96:
- :string
- :application_name
98:
- :uint8
- :postIpDiffServCodePoint
136:
- :uint8
- :flow_end_reason
147:
- :string
- :wlanSSID
148:
- :uint32
- :conn_id
152:
- 8
- :flow_start_msec
176:
- :uint8
- :icmp_type
177:
- :uint8
- :icmp_code
178:
- :uint8
- :icmp_type_ipv6
179:
- :uint8
- :icmp_code_ipv6
180:
- :uint16
- :udp_src_port
181:
- :uint16
- :udp_dst_port
182:
- :uint16
- :tcp_src_port
183:
- :uint16
- :tcp_dst_port
194:
- :uint8
- :ip_tos
195:
- :uint8
- :ip_dscp
201:
- mpls_label_stack_octets
- mpls_label_stack_octets
225:
- :ip4_addr
- :xlate_src_addr_ipv4
226:
- :ip4_addr
- :xlate_dst_addr_ipv4
227:
- :uint16
- :xlate_src_port
228:
- :uint16
- :xlate_dst_port
231:
- :uint32
- :fwd_flow_delta_bytes
232:
- :uint32
- :rev_flow_delta_bytes
233:
- :uint8
- :fw_event
234:
- :uint32
- :ingressVRFID
235:
- :uint32
- :egressVRFID
236:
- :string
- :VRFname
281:
- :ip6_addr
- :xlate_src_addr_ipv6
282:
- :ip6_addr
- :xlate_dst_addr_ipv6
298:
- :uint64
- :initiatorPackets
299:
- :uint64
- :responderPackets
323:
- 8
- :event_time_msec
361:
- :uint16
- :postNATPortBlockStart
362:
- :uint16
- :postNATPortBlockEnd
365:
- :mac_addr
- :staMacAddress
366:
- :ip4_addr
- :staIPv4Address
367:
- :mac_addr
- :wtpMacAddress
8192:
- :uint32
- :streamcore_wan_rtt
8193:
- :uint32
- :streamcore_net_app_resp_time
8194:
- :uint32
- :streamcore_total_app_resp_time
8195:
- :uint16
- :streamcore_tcp_retrans_rate
8196:
- :uint8
- :streamcore_call_direction
8256:
- :string
- :streamcore_hostname
8257:
- :string
- :streamcore_url
8258:
- :string
- :streamcore_ssl_cn
8259:
- :string
- :streamcore_ssl_org
8320:
- :uint16
- :streamcore_mos_lq
8321:
- :uint16
- :streamcore_net_delay
8322:
- :uint16
- :streamcore_net_loss
8323:
- :uint16
- :streamcore_net_jitter
8324:
- :uint16
- :streamcore_net_discard
8325:
- :uint8
- :streamcore_rtp_clockrate_in
8326:
- :uint8
- :streamcore_rtp_clockrate_out
8327:
- :uint8
- :streamcore_codec_in
8328:
- :uint8
- :streamcore_codec_out
8384:
- :uint32
- :streamcore_id_rule_1
8385:
- :uint32
- :streamcore_id_rule_2
8386:
- :uint32
- :streamcore_id_rule_3
8387:
- :uint32
- :streamcore_id_rule_4
8388:
- :uint32
- :streamcore_id_rule_5
8389:
- :uint32
- :streamcore_id_rule_6
8390:
- :uint32
- :streamcore_id_rule_7
8391:
- :uint32
- :streamcore_id_rule_8
8392:
- :uint32
- :streamcore_id_rule_9
8393:
- :uint32
- :streamcore_id_rule_10
33000:
- :acl_id_asa
- :ingress_acl_id
33001:
- :acl_id_asa
- egress_acl_id
33002:
- :uint16
- :fw_ext_event
40000:
- :string
- :username
40001:
- :ip4_addr
- :xlate_src_addr_ipv4
40002:
- :ip4_addr
- :xlate_dst_addr_ipv4
40003:
- :uint16
- :xlate_src_port
40004:
- :uint16
- :xlate_dst_port
40005:
- :uint8
- :fw_event