Wireshark
the world's foremost network protocol analyzer
Display Filter Reference: Cisco NetFlow/IPFIX
Protocol field name: cflow
Versions: 1.0.0 to 1.6.5
Back to Display Filter Reference
| Field name | Type | Description | Versions |
|---|---|---|---|
| cflow.aaa_username | Character string | AAA username | 1.4.0 to 1.6.5 |
| cflow.absolute_error | Floating point (single-precision) | Absolute Error | 1.4.0 to 1.6.5 |
| cflow.abstimeend | Date and time | EndTime | 1.2.0 to 1.6.5 |
| cflow.abstimestart | Date and time | StartTime | 1.2.0 to 1.6.5 |
| cflow.aggmethod | Unsigned integer, 1 byte | AggMethod | 1.0.0 to 1.6.5 |
| cflow.aggversion | Unsigned integer, 1 byte | AggVersion | 1.0.0 to 1.6.5 |
| cflow.appl_desc | Character string | ApplicationDesc | 1.4.0 to 1.6.5 |
| cflow.appl_id | Unsigned integer, 4 bytes | ApplicationID | 1.4.0 to 1.6.5 |
| cflow.appl_name | Character string | ApplicationName | 1.4.0 to 1.6.5 |
| cflow.bgpnexthop | IPv4 address | BGPNextHop | 1.0.0 to 1.6.5 |
| cflow.bgpnexthopv6 | IPv6 address | BGPNextHop | 1.0.0 to 1.6.5 |
| cflow.biflow_direction | Unsigned integer, 1 byte | Biflow Direction | 1.2.0 to 1.6.5 |
| cflow.collection_time_milliseconds | Date and time | Collection Time Milliseconds | 1.4.0 to 1.6.5 |
| cflow.collector_addr | IPv4 address | CollectorAddr | 1.2.0 to 1.6.5 |
| cflow.collector_addr_v6 | IPv6 address | CollectorAddr | 1.2.0 to 1.6.5 |
| cflow.collector_certificate | Sequence of bytes | Collector Certificate | 1.4.0 to 1.6.5 |
| cflow.collector_port | Unsigned integer, 2 bytes | CollectorPort | 1.2.0 to 1.6.5 |
| cflow.common_properties_id | Unsigned integer, 8 bytes | Common Properties Id | 1.2.0 to 1.6.5 |
| cflow.confidence_level | Floating point (single-precision) | Confidence Level | 1.4.0 to 1.6.5 |
| cflow.count | Unsigned integer, 2 bytes | Count | 1.0.0 to 1.6.5 |
| cflow.data_datarecord_id | Unsigned integer, 2 bytes | DataRecord (Template Id) | 1.0.0 to 1.4.11 |
| cflow.data_flowset_id | Unsigned integer, 2 bytes | Data FlowSet (Template Id) | 1.0.0 to 1.4.11 |
| cflow.datarecord_length | Unsigned integer, 2 bytes | DataRecord Length | 1.2.0 to 1.4.11 |
| cflow.digest_hash_value | Unsigned integer, 8 bytes | Digest Hash Value | 1.4.0 to 1.6.5 |
| cflow.direction | Unsigned integer, 1 byte | Direction | 1.0.0 to 1.6.5 |
| cflow.dot1q_customer_priority | Unsigned integer, 1 byte | Dot1q Customer Priority | 1.4.0 to 1.6.5 |
| cflow.dot1q_customer_vlan_id | Unsigned integer, 2 bytes | Dot1q Customer Vlan Id | 1.4.0 to 1.6.5 |
| cflow.dot1q_priority | Unsigned integer, 1 byte | Dot1q Priority | 1.4.0 to 1.6.5 |
| cflow.dot1q_vlan_id | Unsigned integer, 2 bytes | Dot1q Vlan Id | 1.4.0 to 1.6.5 |
| cflow.drop_octets | Unsigned integer, 4 bytes | Dropped Octets | 1.2.0 to 1.6.5 |
| cflow.drop_octets64 | Unsigned integer, 8 bytes | Dropped Octets | 1.2.0 to 1.6.5 |
| cflow.drop_packets | Unsigned integer, 4 bytes | Dropped Packets | 1.2.0 to 1.6.5 |
| cflow.drop_packets64 | Unsigned integer, 8 bytes | Dropped Packets | 1.2.0 to 1.6.5 |
| cflow.drop_total_octets | Unsigned integer, 4 bytes | Dropped Total Octets | 1.2.4 to 1.6.5 |
| cflow.drop_total_octets64 | Unsigned integer, 8 bytes | Dropped Total Octets | 1.2.4 to 1.6.5 |
| cflow.drop_total_packets | Unsigned integer, 4 bytes | Dropped Total Packets | 1.2.4 to 1.6.5 |
| cflow.drop_total_packets64 | Unsigned integer, 8 bytes | Dropped Total Packets | 1.2.4 to 1.6.5 |
| cflow.dstaddr | IPv4 address | DstAddr | 1.0.0 to 1.6.5 |
| cflow.dstaddrv6 | IPv6 address | DstAddr | 1.0.0 to 1.6.5 |
| cflow.dstas | Unsigned integer, 2 bytes | DstAS | 1.0.0 to 1.6.5 |
| cflow.dstmac | Ethernet or other MAC address | Destination Mac Address | 1.2.0 to 1.6.5 |
| cflow.dstmask | Unsigned integer, 1 byte | DstMask | 1.0.0 to 1.6.5 |
| cflow.dstmaskv6 | Unsigned integer, 1 byte | DstMask | 1.0.0 to 1.6.5 |
| cflow.dstnet | IPv4 address | DstNet | 1.2.0 to 1.6.5 |
| cflow.dstnetv6 | IPv6 address | DstNet | 1.2.0 to 1.6.5 |
| cflow.dstport | Unsigned integer, 2 bytes | DstPort | 1.0.0 to 1.6.5 |
| cflow.dstprefix | IPv4 address | DstPrefix | 1.0.0 to 1.6.5 |
| cflow.egress_acl_id | Sequence of bytes | Egress ACL ID | 1.4.0 to 1.6.5 |
| cflow.egress_physical_interface | Unsigned integer, 4 bytes | Egress Physical Interface | 1.4.0 to 1.6.5 |
| cflow.egress_vrfid | Unsigned integer, 4 bytes | Egress VRFID | 1.4.0 to 1.6.5 |
| cflow.engine_id | Unsigned integer, 1 byte | EngineId | 1.0.0 to 1.6.5 |
| cflow.engine_type | Unsigned integer, 1 byte | EngineType | 1.0.0 to 1.6.5 |
| cflow.enterprise_private_entry | Sequence of bytes | Enterprise Private entry | 1.6.0 to 1.6.5 |
| cflow.ethernet_header_length | Unsigned integer, 1 byte | Ethernet Header Length | 1.4.0 to 1.6.5 |
| cflow.ethernet_payload_length | Unsigned integer, 2 bytes | Ethernet Payload Length | 1.4.0 to 1.6.5 |
| cflow.ethernet_total_length | Unsigned integer, 2 bytes | Ethernet Total Length | 1.4.0 to 1.6.5 |
| cflow.ethernet_type | Unsigned integer, 2 bytes | Ethernet Type | 1.4.0 to 1.6.5 |
| cflow.export_interface | Unsigned integer, 4 bytes | ExportInterface | 1.2.0 to 1.6.5 |
| cflow.export_protocol_version | Unsigned integer, 1 byte | ExportProtocolVersion | 1.2.0 to 1.6.5 |
| cflow.export_sctp_stream_id | Unsigned integer, 2 bytes | Export Sctp Stream Id | 1.4.0 to 1.6.5 |
| cflow.exporter_addr | IPv4 address | ExporterAddr | 1.2.0 to 1.6.5 |
| cflow.exporter_addr_v6 | IPv6 address | ExporterAddr | 1.2.0 to 1.6.5 |
| cflow.exporter_certificate | Sequence of bytes | Exporter Certificate | 1.4.0 to 1.6.5 |
| cflow.exporter_port | Unsigned integer, 2 bytes | ExporterPort | 1.2.0 to 1.6.5 |
| cflow.exporter_protocol | Unsigned integer, 1 byte | ExportTransportProtocol | 1.2.0 to 1.6.5 |
| cflow.exporttime | Unsigned integer, 4 bytes | ExportTime | 1.0.0 to 1.6.5 |
| cflow.field_count | Unsigned integer, 2 bytes | Field Count | 1.4.0 to 1.4.11 |
| cflow.firewall_event | Unsigned integer, 1 byte | Firewall Event | 1.4.0 to 1.6.5 |
| cflow.flags | Unsigned integer, 1 byte | Export Flags | 1.0.0 to 1.6.5 |
| cflow.flow_active_timeout | Unsigned integer, 2 bytes | Flow active timeout | 1.0.0 to 1.6.5 |
| cflow.flow_class | Unsigned integer, 1 byte | FlowClass | 1.0.0 to 1.6.5 |
| cflow.flow_end_reason | Unsigned integer, 1 byte | Flow End Reason | 1.2.0 to 1.6.5 |
| cflow.flow_exporter | Sequence of bytes | FlowExporter | 1.0.0 to 1.6.5 |
| cflow.flow_id | Unsigned integer, 8 bytes | Flow Id | 1.2.0 to 1.6.5 |
| cflow.flow_inactive_timeout | Unsigned integer, 2 bytes | Flow inactive timeout | 1.0.0 to 1.6.5 |
| cflow.flows | Unsigned integer, 4 bytes | Flows | 1.0.0 to 1.6.5 |
| cflow.flows64 | Unsigned integer, 8 bytes | Flows | 1.6.0 to 1.6.5 |
| cflow.flowset_id | Unsigned integer, 2 bytes | FlowSet Id | 1.0.0 to 1.6.5 |
| cflow.flowset_length | Unsigned integer, 2 bytes | FlowSet Length | 1.0.0 to 1.6.5 |
| cflow.flowsexp | Unsigned integer, 4 bytes | FlowsExp | 1.0.0 to 1.6.5 |
| cflow.flowsexp64 | Unsigned integer, 8 bytes | FlowsExp | 1.6.0 to 1.6.5 |
| cflow.forwarding_code | Unsigned integer, 1 byte | ForwdCode | 1.0.0 to 1.4.11 |
| cflow.forwarding_status | Unsigned integer, 1 byte | ForwdStat | 1.0.0 to 1.6.5 |
| cflow.forwarding_status_consume_code | Unsigned integer, 1 byte | ForwdCode | 1.6.0 to 1.6.5 |
| cflow.forwarding_status_drop_code | Unsigned integer, 1 byte | ForwdCode | 1.6.0 to 1.6.5 |
| cflow.forwarding_status_foreward_code | Unsigned integer, 1 byte | ForwdCode | 1.6.0 to 1.6.5 |
| cflow.forwarding_status_unknown_code | Unsigned integer, 1 byte | ForwdCode | 1.6.0 to 1.6.5 |
| cflow.fragment_offset | Unsigned integer, 2 bytes | Fragment Offset | 1.2.0 to 1.6.5 |
| cflow.fw_ext_event | Unsigned integer, 2 bytes | Extended firewall event code | 1.4.0 to 1.6.5 |
| cflow.hash_digest_output | Boolean | Hash Digest Output | 1.4.0 to 1.6.5 |
| cflow.hash_initialiser_value | Unsigned integer, 8 bytes | Hash Initialiser Value | 1.4.0 to 1.6.5 |
| cflow.hash_ippayload_offset | Unsigned integer, 8 bytes | Hash IPPayload Offset | 1.4.0 to 1.6.5 |
| cflow.hash_ippayload_size | Unsigned integer, 8 bytes | Hash IPPayload Size | 1.4.0 to 1.6.5 |
| cflow.hash_output_range_max | Unsigned integer, 8 bytes | Hash Output Range Max | 1.4.0 to 1.6.5 |
| cflow.hash_output_range_min | Unsigned integer, 8 bytes | Hash Output Range Min | 1.4.0 to 1.6.5 |
| cflow.hash_selected_range_max | Unsigned integer, 8 bytes | Hash Selected Range Max | 1.4.0 to 1.6.5 |
| cflow.hash_selected_range_min | Unsigned integer, 8 bytes | Hash Selected Range Min | 1.4.0 to 1.6.5 |
| cflow.icmp_ipv4_code | Unsigned integer, 1 byte | IPv4 ICMP Code | 1.0.0 to 1.6.5 |
| cflow.icmp_ipv4_type | Unsigned integer, 1 byte | IPv4 ICMP Type | 1.0.0 to 1.6.5 |
| cflow.icmp_ipv6_code | Unsigned integer, 1 byte | IPv6 ICMP Code | 1.0.0 to 1.6.5 |
| cflow.icmp_ipv6_type | Unsigned integer, 1 byte | IPv6 ICMP Type | 1.0.0 to 1.6.5 |
| cflow.icmp_type | Unsigned integer, 1 byte | ICMP Type | 1.0.0 to 1.6.5 |
| cflow.if_descr | Character string | IfDescr | 1.0.0 to 1.6.5 |
| cflow.if_name | Character string | IfName | 1.0.0 to 1.6.5 |
| cflow.igmp_type | Unsigned integer, 1 byte | IGMP Type | 1.0.0 to 1.6.5 |
| cflow.ignore_octets | Unsigned integer, 4 bytes | Ignored Octets | 1.2.0 to 1.6.5 |
| cflow.ignore_octets64 | Unsigned integer, 8 bytes | Ignored Octets | 1.2.0 to 1.6.5 |
| cflow.ignore_packets | Unsigned integer, 4 bytes | Ignored Packets | 1.2.0 to 1.6.5 |
| cflow.ignore_packets64 | Unsigned integer, 8 bytes | Ignored Packets | 1.2.0 to 1.6.5 |
| cflow.information_element_data_type | Unsigned integer, 1 byte | Information Element Data Type | 1.4.0 to 1.6.5 |
| cflow.information_element_description | Character string | Information Element Description | 1.4.0 to 1.6.5 |
| cflow.information_element_id | Unsigned integer, 2 bytes | Information Element Id | 1.4.0 to 1.6.5 |
| cflow.information_element_name | Character string | Information Element Name | 1.4.0 to 1.6.5 |
| cflow.information_element_range_begin | Unsigned integer, 8 bytes | Information Element Range Begin | 1.4.0 to 1.6.5 |
| cflow.information_element_range_end | Unsigned integer, 8 bytes | Information Element Range End | 1.4.0 to 1.6.5 |
| cflow.information_element_semantics | Unsigned integer, 1 byte | Information Element Semantics | 1.4.0 to 1.6.5 |
| cflow.information_element_units | Unsigned integer, 2 bytes | Information Element Units | 1.4.0 to 1.6.5 |
| cflow.ingress_acl_id | Sequence of bytes | Ingress ACL ID | 1.4.0 to 1.6.5 |
| cflow.ingress_physical_interface | Unsigned integer, 4 bytes | Ingress Physical Interface | 1.4.0 to 1.6.5 |
| cflow.ingress_vrfid | Unsigned integer, 4 bytes | Ingress VRFID | 1.4.0 to 1.6.5 |
| cflow.initiator_octets | Unsigned integer, 8 bytes | Initiator Octets | 1.4.0 to 1.6.5 |
| cflow.inputint | Unsigned integer, 2 bytes | InputInt | 1.0.0 to 1.6.5 |
| cflow.ip_dscp | Unsigned integer, 1 byte | DSCP | 1.0.0 to 1.6.5 |
| cflow.ip_fragment_flags | Unsigned integer, 1 byte | IP Fragment Flags | 1.2.0 to 1.6.5 |
| cflow.ip_header_length | Unsigned integer, 1 byte | IP Header Length | 1.2.0 to 1.6.5 |
| cflow.ip_header_words | Unsigned integer, 1 byte | IPHeaderLen | 1.0.0 to 1.6.5 |
| cflow.ip_payload_length | Unsigned integer, 4 bytes | IP Payload Length | 1.2.0 to 1.6.5 |
| cflow.ip_precedence | Unsigned integer, 1 byte | IP Precedence | 1.2.0 to 1.6.5 |
| cflow.ip_tos | Unsigned integer, 1 byte | IP TOS | 1.0.0 to 1.6.5 |
| cflow.ip_total_length | Unsigned integer, 8 bytes | IP Total Length | 1.0.0 to 1.6.5 |
| cflow.ip_ttl | Unsigned integer, 1 byte | IP TTL | 1.0.0 to 1.6.5 |
| cflow.ip_version | Sequence of bytes | IPVersion | 1.0.0 to 1.6.5 |
| cflow.ipv4_ident | Unsigned integer, 2 bytes | IPv4Ident | 1.0.0 to 1.6.5 |
| cflow.ipv4_total_length | Unsigned integer, 2 bytes | IPV4 Total Length | 1.6.0 to 1.6.5 |
| cflow.ipv6_exthdr | Unsigned integer, 4 bytes | IPv6 Extension Headers | 1.2.0 to 1.6.5 |
| cflow.ipv6_next_hdr | Unsigned integer, 1 byte | IPv6 Next Header | 1.2.0 to 1.6.5 |
| cflow.ipv6_payload_length | Unsigned integer, 2 bytes | IPv6 Payload Length | 1.2.0 to 1.6.5 |
| cflow.ipv6flowlabel | Unsigned integer, 4 bytes | ipv6FlowLabel | 1.2.0 to 1.6.5 |
| cflow.ipv6flowlabel24 | Unsigned integer, 4 bytes | ipv6FlowLabel | 1.2.0 to 1.6.5 |
| cflow.is_multicast | Unsigned integer, 1 byte | IsMulticast | 1.0.0 to 1.6.5 |
| cflow.len | Unsigned integer, 2 bytes | Length | 1.0.0 to 1.6.5 |
| cflow.length_max | Unsigned integer, 2 bytes | MaxLength | 1.0.0 to 1.6.5 |
| cflow.length_min | Unsigned integer, 2 bytes | MinLength | 1.0.0 to 1.6.5 |
| cflow.lower_cilimit | Floating point (single-precision) | Lower CILimit | 1.4.0 to 1.6.5 |
| cflow.max_export_seconds | Date and time | Max Export Seconds | 1.4.0 to 1.6.5 |
| cflow.max_flow_end_microseconds | Date and time | Max Flow End Microseconds | 1.4.0 to 1.6.5 |
| cflow.max_flow_end_milliseconds | Date and time | Max Flow End Milliseconds | 1.4.0 to 1.6.5 |
| cflow.max_flow_end_nanoseconds | Date and time | Max Flow End Nanoseconds | 1.4.0 to 1.6.5 |
| cflow.max_flow_end_seconds | Date and time | Max Flow End Seconds | 1.4.0 to 1.6.5 |
| cflow.message_md5_checksum | Sequence of bytes | Message MD5 Checksum | 1.4.0 to 1.6.5 |
| cflow.message_scope | Unsigned integer, 1 byte | Message Scope | 1.4.0 to 1.6.5 |
| cflow.metro_evc_id | Character string | Metro Evc Id | 1.4.0 to 1.6.5 |
| cflow.metro_evc_type | Unsigned integer, 1 byte | Metro Evc Type | 1.4.0 to 1.6.5 |
| cflow.min_export_seconds | Date and time | Min Export Seconds | 1.4.0 to 1.6.5 |
| cflow.min_flow_start_microseconds | Date and time | Min Flow Start Microseconds | 1.4.0 to 1.6.5 |
| cflow.min_flow_start_milliseconds | Date and time | Min Flow Start Milliseconds | 1.4.0 to 1.6.5 |
| cflow.min_flow_start_nanoseconds | Date and time | Min Flow Start Nanoseconds | 1.4.0 to 1.6.5 |
| cflow.min_flow_start_seconds | Date and time | Min Flow Start Seconds | 1.4.0 to 1.6.5 |
| cflow.mp_id | Unsigned integer, 4 bytes | Metering Process Id | 1.2.0 to 1.6.5 |
| cflow.mpls_label_depth | Unsigned integer, 4 bytes | MPLS Label Stack Depth | 1.2.0 to 1.6.5 |
| cflow.mpls_label_length | Unsigned integer, 4 bytes | MPLS Label Stack Length | 1.2.0 to 1.6.5 |
| cflow.mpls_label_stack_section | Sequence of bytes | Mpls Label Stack Section | 1.4.0 to 1.6.5 |
| cflow.mpls_payload_packet_section | Sequence of bytes | Mpls Payload Packet Section | 1.4.0 to 1.6.5 |
| cflow.mpls_top_label_exp | Unsigned integer, 1 byte | MPLS Top Label Exp | 1.2.0 to 1.6.5 |
| cflow.mpls_top_label_prefix_length | Unsigned integer, 1 byte | Mpls Top Label Prefix Length | 1.4.0 to 1.6.5 |
| cflow.mpls_top_label_ttl | Unsigned integer, 1 byte | MPLS Top Label TTL | 1.2.0 to 1.6.5 |
| cflow.mpls_vpn_rd | Sequence of bytes | MPLS VPN RD | 1.2.0 to 1.6.5 |
| cflow.muloctets | Unsigned integer, 4 bytes | MulticastOctets | 1.0.0 to 1.6.5 |
| cflow.mulpackets | Unsigned integer, 4 bytes | MulticastPackets | 1.0.0 to 1.6.5 |
| cflow.multicast_replication_factor | Sequence of bytes | Multicast Replication Factor | 1.4.0 to 1.6.5 |
| cflow.nat_event | Unsigned integer, 1 byte | Nat Event | 1.4.0 to 1.6.5 |
| cflow.nat_originating_address_realm | Unsigned integer, 1 byte | Nat Originating Address Realm | 1.4.0 to 1.6.5 |
| cflow.nexthop | IPv4 address | NextHop | 1.0.0 to 1.6.5 |
| cflow.nexthopv6 | IPv6 address | NextHop | 1.0.0 to 1.6.5 |
| cflow.notsent_flows | Unsigned integer, 4 bytes | Not Sent Flows | 1.2.0 to 1.6.5 |
| cflow.notsent_flows64 | Unsigned integer, 8 bytes | Not Sent Flows | 1.2.0 to 1.6.5 |
| cflow.notsent_octets | Unsigned integer, 4 bytes | Not Sent Octets | 1.2.0 to 1.6.5 |
| cflow.notsent_octets64 | Unsigned integer, 8 bytes | Not Sent Octets | 1.2.0 to 1.6.5 |
| cflow.notsent_packets | Unsigned integer, 4 bytes | Not Sent Packets | 1.2.0 to 1.6.5 |
| cflow.notsent_packets64 | Unsigned integer, 8 bytes | Not Sent Packets | 1.2.0 to 1.6.5 |
| cflow.observation_point_id | Unsigned integer, 4 bytes | Observation Point Id | 1.2.0 to 1.6.5 |
| cflow.observation_time_microseconds | Date and time | Observation Time Microseconds | 1.4.0 to 1.6.5 |
| cflow.observation_time_milliseconds | Date and time | Observation Time Milliseconds | 1.4.0 to 1.6.5 |
| cflow.observation_time_nanoseconds | Date and time | Observation Time Nanoseconds | 1.4.0 to 1.6.5 |
| cflow.observation_time_seconds | Date and time | Observation Time Seconds | 1.4.0 to 1.6.5 |
| cflow.octets | Unsigned integer, 4 bytes | Octets | 1.0.0 to 1.6.5 |
| cflow.octets64 | Unsigned integer, 8 bytes | Octets | 1.0.0 to 1.6.5 |
| cflow.octets_squared | Unsigned integer, 8 bytes | OctetsSquared | 1.0.0 to 1.6.5 |
| cflow.octetsexp | Unsigned integer, 4 bytes | OctetsExp | 1.0.0 to 1.6.5 |
| cflow.octetsexp64 | Unsigned integer, 8 bytes | OctetsExp | 1.6.0 to 1.6.5 |
| cflow.od_id | Unsigned integer, 4 bytes | Observation Domain Id | 1.2.0 to 1.6.5 |
| cflow.opaque_octets | Sequence of bytes | Opaque Octets | 1.4.0 to 1.6.5 |
| cflow.option_length | Unsigned integer, 2 bytes | Option Length | 1.0.0 to 1.6.5 |
| cflow.option_map | Sequence of bytes | OptionMap | 1.0.0 to 1.6.5 |
| cflow.option_scope_length | Unsigned integer, 2 bytes | Option Scope Length | 1.0.0 to 1.6.5 |
| cflow.options_flowset_id | Unsigned integer, 2 bytes | Options FlowSet | 1.0.0 to 1.4.11 |
| cflow.outputint | Unsigned integer, 2 bytes | OutputInt | 1.0.0 to 1.6.5 |
| cflow.packets | Unsigned integer, 4 bytes | Packets | 1.0.0 to 1.6.5 |
| cflow.packets64 | Unsigned integer, 8 bytes | Packets | 1.0.0 to 1.6.5 |
| cflow.packetsexp | Unsigned integer, 4 bytes | PacketsExp | 1.0.0 to 1.6.5 |
| cflow.packetsexp64 | Unsigned integer, 8 bytes | PacketsExp | 1.6.0 to 1.6.5 |
| cflow.packetsout | Unsigned integer, 8 bytes | PacketsOut | 1.0.0 to 1.0.16 |
| cflow.peer_dstas | Unsigned integer, 2 bytes | PeerDstAS | 1.0.0 to 1.6.5 |
| cflow.peer_srcas | Unsigned integer, 2 bytes | PeerSrcAS | 1.0.0 to 1.6.5 |
| cflow.permanent_octets | Unsigned integer, 4 bytes | Permanent Octets | 1.6.0 to 1.6.5 |
| cflow.permanent_octets64 | Unsigned integer, 8 bytes | Permanent Octets | 1.6.0 to 1.6.5 |
| cflow.permanent_packets | Unsigned integer, 4 bytes | Permanent Packets | 1.6.0 to 1.6.5 |
| cflow.permanent_packets64 | Unsigned integer, 8 bytes | Permanent Packets | 1.6.0 to 1.6.5 |
| cflow.pie.cace.localaddr4 | IPv4 address | Local IPv4 Address | 1.2.0 to 1.6.5 |
| cflow.pie.cace.localaddr6 | IPv6 address | Local IPv6 Address | 1.2.0 to 1.6.5 |
| cflow.pie.cace.localcmd | Character string | Local Command | 1.2.0 to 1.6.5 |
| cflow.pie.cace.localcmdlen | Unsigned integer, 1 byte | Local Command Length | 1.2.0 to 1.6.5 |
| cflow.pie.cace.localicmpid | Unsigned integer, 2 bytes | Local ICMP ID | 1.2.0 to 1.6.5 |
| cflow.pie.cace.localip4id | Unsigned integer, 2 bytes | Local IPv4 ID | 1.2.0 to 1.6.5 |
| cflow.pie.cace.localpid | Unsigned integer, 4 bytes | Local Process ID | 1.2.0 to 1.6.5 |
| cflow.pie.cace.localport | Unsigned integer, 2 bytes | Local Port | 1.2.0 to 1.6.5 |
| cflow.pie.cace.localuid | Unsigned integer, 4 bytes | Local User ID | 1.2.0 to 1.6.5 |
| cflow.pie.cace.localusername | Character string | Local User Name | 1.2.0 to 1.6.5 |
| cflow.pie.cace.localusernamelen | Unsigned integer, 1 byte | Local Username Length | 1.2.0 to 1.6.5 |
| cflow.pie.cace.remoteaddr4 | IPv4 address | Remote IPv4 Address | 1.2.0 to 1.6.5 |
| cflow.pie.cace.remoteaddr6 | IPv6 address | Remote IPv6 Address | 1.2.0 to 1.6.5 |
| cflow.pie.cace.remoteport | Unsigned integer, 2 bytes | Remote Port | 1.2.0 to 1.6.5 |
| cflow.pie.ntop.appl_latency_sec | Unsigned integer, 4 bytes | Appl_latency_sec | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.client_nw_delay_sec | Unsigned integer, 4 bytes | Client_nw_delay_sec | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.client_nw_delay_usec | Unsigned integer, 4 bytes | Client_nw_delay_usec | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.dst_ip_city | Character string | Dst_ip_city | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.dst_ip_country | Character string | Dst_ip_country | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.dump_path | Character string | Dump_path | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.fingerprint | Unsigned integer, 4 bytes | Fingerprint | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.flow_proto_port | Unsigned integer, 2 bytes | Flow_proto_port | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.fragmented | Boolean | Fragmented | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.http_ret_code | Unsigned integer, 2 bytes | Http_ret_code | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.http_url | Character string | Http_url | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.icmp_flags | Unsigned integer, 2 bytes | Icmp_flags | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.longest_flow_pkt | Unsigned integer, 4 bytes | Longest_flow_pkt | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.mysql_db | Character string | Mysql_db | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.mysql_query | Character string | Mysql_query | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.mysql_response | Unsigned integer, 2 bytes | Mysql_response | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.mysql_server_version | Character string | Mysql_server_version | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.mysql_username | Character string | Mysql_username | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.ooorder_in_pkts | Unsigned integer, 4 bytes | Ooorder_in_pkts | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.ooorder_out_pkts | Unsigned integer, 4 bytes | Ooorder_out_pkts | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.proc_id | Unsigned integer, 4 bytes | Proc_id | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.proc_name | Character string | Proc_name | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.retransmitted_in_pkts | Unsigned integer, 4 bytes | Retransmitted_in_pkts | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.retransmitted_out_pkts | Unsigned integer, 4 bytes | Retransmitted_out_pkts | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.rtp_first_ssrc | Unsigned integer, 4 bytes | Rtp_first_ssrc | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.rtp_first_ts | Date and time | Rtp_first_ts | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.rtp_in_jitter | Unsigned integer, 4 bytes | Rtp_in_jitter | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.rtp_in_max_delta | Unsigned integer, 4 bytes | Rtp_in_max_delta | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.rtp_in_pkt_lost | Unsigned integer, 4 bytes | Rtp_in_pkt_lost | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.rtp_last_ssrc | Unsigned integer, 4 bytes | Rtp_last_ssrc | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.rtp_last_ts | Date and time | Rtp_last_ts | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.rtp_out_jitter | Unsigned integer, 4 bytes | Rtp_out_jitter | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.rtp_out_max_delta | Unsigned integer, 4 bytes | Rtp_out_max_delta | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.rtp_out_payload_type | Unsigned integer, 4 bytes | Rtp_out_payload_type | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.rtp_out_pkt_lost | Unsigned integer, 4 bytes | Rtp_out_pkt_lost | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.server_nw_delay_sec | Unsigned integer, 4 bytes | Server_nw_delay_sec | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.server_nw_delay_usec | Unsigned integer, 4 bytes | Server_nw_delay_usec | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.shortest_flow_pkt | Unsigned integer, 4 bytes | Shortest_flow_pkt | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.sip_bye_time | Unsigned integer, 4 bytes | Sip_bye_time | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.sip_call_id | Character string | Sip_call_id | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.sip_called_party | Character string | Sip_called_party | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.sip_calling_party | Character string | Sip_calling_party | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.sip_invite_time | Unsigned integer, 4 bytes | Sip_invite_time | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.sip_ok_time | Unsigned integer, 4 bytes | Sip_ok_time | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.sip_ringing_time | Unsigned integer, 4 bytes | Sip_ringing_time | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.sip_rtp_codecs | Character string | Sip_rtp_codecs | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.sip_rtp_dst_ip | IPv4 address | Sip_rtp_dst_ip | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.sip_rtp_dst_port | Unsigned integer, 2 bytes | Sip_rtp_dst_port | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.sip_rtp_src_ip | IPv4 address | Sip_rtp_src_ip | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.sip_rtp_src_port | Unsigned integer, 2 bytes | Sip_rtp_src_port | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.sip_trying_time | Unsigned integer, 4 bytes | Sip_trying_time | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.smtp_mail_from | Character string | Smtp_mail_from | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.smtp_rcpt_to | Character string | Smtp_rcpt_to | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.src_ip_city | Character string | Src_ip_city | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.src_ip_country | Character string | Src_ip_country | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.tunnel_id | Unsigned integer, 4 bytes | Tunnel_id | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.untunneled_ipv4_dst_addr | IPv4 address | Untunneled_ipv4_dst_addr | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.untunneled_ipv4_src_addr | IPv4 address | Untunneled_ipv4_src_addr | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.untunneled_l4_dst_port | Unsigned integer, 2 bytes | Untunneled_l4_dst_port | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.untunneled_l4_src_port | Unsigned integer, 2 bytes | Untunneled_l4_src_port | 1.6.0 to 1.6.5 |
| cflow.pie.ntop.untunneled_protocol | Unsigned integer, 1 byte | Untunneled_protocol | 1.6.0 to 1.6.5 |
| cflow.pie.plixer.client.ip_v4 | IPv4 address | client_ip_v4 | 1.6.0 to 1.6.5 |
| cflow.pie.plixer.client_hostname | Character string | client_hostname | 1.6.0 to 1.6.5 |
| cflow.pie.plixer.date_time | Date and time | Date_time | 1.6.0 to 1.6.5 |
| cflow.pie.plixer.encryption | Unsigned integer, 4 bytes | Cncryption | 1.6.0 to 1.6.5 |
| cflow.pie.plixer.event_id | Unsigned integer, 4 bytes | Event_id | 1.6.0 to 1.6.5 |
| cflow.pie.plixer.linked_msgid | Character string | Linked_msgid | 1.6.0 to 1.6.5 |
| cflow.pie.plixer.message_subject | Character string | Message_subject | 1.6.0 to 1.6.5 |
| cflow.pie.plixer.msgid | Character string | Msgid | 1.6.0 to 1.6.5 |
| cflow.pie.plixer.number_recipients | Unsigned integer, 4 bytes | Number_recipients | 1.6.0 to 1.6.5 |
| cflow.pie.plixer.origination_time | Date and time | Origination_time | 1.6.0 to 1.6.5 |
| cflow.pie.plixer.partner_name | Character string | Partner_name | 1.6.0 to 1.6.5 |
| cflow.pie.plixer.recipient_address | Character string | Recipient_address | 1.6.0 to 1.6.5 |
| cflow.pie.plixer.recipient_report_status | Unsigned integer, 4 bytes | Recipient_report_status | 1.6.0 to 1.6.5 |
| cflow.pie.plixer.sender_address | Character string | Sender_address | 1.6.0 to 1.6.5 |
| cflow.pie.plixer.server_hostname | Character string | Server_hostname | 1.6.0 to 1.6.5 |
| cflow.pie.plixer.server_ip_v4 | IPv4 address | Server_ip_v4 | 1.6.0 to 1.6.5 |
| cflow.pie.plixer.service_version | Character string | Service_version | 1.6.0 to 1.6.5 |
| cflow.pie.plixer_priority | Unsigned integer, 4 bytes | Priority | 1.6.0 to 1.6.5 |
| cflow.port_id | Unsigned integer, 4 bytes | Port Id | 1.2.0 to 1.6.5 |
| cflow.post_dot1q_customer_vlan_id | Unsigned integer, 2 bytes | Post Dot1q Customer Vlan Id | 1.4.0 to 1.6.5 |
| cflow.post_dot1q_vlan_id | Unsigned integer, 2 bytes | Post Dot1q Vlan Id | 1.4.0 to 1.6.5 |
| cflow.post_dstmac | Ethernet or other MAC address | Post Destination Mac Address | 1.2.0 to 1.6.5 |
| cflow.post_ip_diff_serv_code_point | Unsigned integer, 1 byte | Post Ip Diff Serv Code Point | 1.4.0 to 1.6.5 |
| cflow.post_ip_precedence | Unsigned integer, 1 byte | Post Ip Precedence | 1.4.0 to 1.6.5 |
| cflow.post_key | Boolean | floKeyIndicator | 1.2.0 to 1.6.5 |
| cflow.post_mpls_top_label_exp | Unsigned integer, 1 byte | Post Mpls Top Label Exp | 1.4.0 to 1.6.5 |
| cflow.post_naptdestination_transport_port | Unsigned integer, 2 bytes | Post NAPT Destination Transport Port | 1.4.0 to 1.6.5 |
| cflow.post_naptsource_transport_port | Unsigned integer, 2 bytes | Post NAPT Source Transport Port | 1.4.0 to 1.6.5 |
| cflow.post_natdestination_ipv4_address | IPv4 address | Post NAT Destination IPv4 Address | 1.4.0 to 1.6.5 |
| cflow.post_natsource_ipv4_address | IPv4 address | Post NAT Source IPv4 Address | 1.4.0 to 1.6.5 |
| cflow.post_octets | Unsigned integer, 4 bytes | Post Octets | 1.2.0 to 1.6.5 |
| cflow.post_octets64 | Unsigned integer, 8 bytes | Post Octets | 1.2.0 to 1.6.5 |
| cflow.post_packets | Unsigned integer, 4 bytes | Post Packets | 1.2.0 to 1.6.5 |
| cflow.post_packets64 | Unsigned integer, 8 bytes | Post Packets | 1.2.0 to 1.6.5 |
| cflow.post_srcmac | Ethernet or other MAC address | Post Source Mac Address | 1.2.0 to 1.6.5 |
| cflow.post_tos | Unsigned integer, 1 byte | Post IP ToS | 1.2.0 to 1.6.5 |
| cflow.post_total_muloctets | Unsigned integer, 4 bytes | Post Total Multicast Octets | 1.2.0 to 1.6.5 |
| cflow.post_total_muloctets64 | Unsigned integer, 8 bytes | Post Total Multicast Octets | 1.2.0 to 1.6.5 |
| cflow.post_total_mulpackets | Unsigned integer, 4 bytes | Post Total Multicast Packets | 1.2.0 to 1.6.5 |
| cflow.post_total_mulpackets64 | Unsigned integer, 8 bytes | Post Total Multicast Packets | 1.2.0 to 1.6.5 |
| cflow.post_total_octets | Unsigned integer, 4 bytes | Post Total Octets | 1.2.0 to 1.6.5 |
| cflow.post_total_octets64 | Unsigned integer, 8 bytes | Post Total Octets | 1.2.0 to 1.6.5 |
| cflow.post_total_packets | Unsigned integer, 4 bytes | Post Total Packets | 1.2.0 to 1.6.5 |
| cflow.post_total_packets64 | Unsigned integer, 8 bytes | Post Total Packets | 1.2.0 to 1.6.5 |
| cflow.post_vlanid | Unsigned integer, 2 bytes | Post Vlan Id | 1.2.0 to 1.6.5 |
| cflow.private_enterprise_number | Unsigned integer, 4 bytes | Private Enterprise Number | 1.4.0 to 1.6.5 |
| cflow.protocol | Unsigned integer, 1 byte | Protocol | 1.0.0 to 1.6.5 |
| cflow.pseudo_wire_control_word | Unsigned integer, 4 bytes | Pseudo Wire Control Word | 1.4.0 to 1.6.5 |
| cflow.pseudo_wire_id | Unsigned integer, 4 bytes | Pseudo Wire Id | 1.4.0 to 1.6.5 |
| cflow.pseudo_wire_type | Unsigned integer, 2 bytes | Pseudo Wire Type | 1.4.0 to 1.6.5 |
| cflow.relative_error | Floating point (single-precision) | Relative Error | 1.4.0 to 1.6.5 |
| cflow.responder_octets | Unsigned integer, 8 bytes | Responder Octets | 1.4.0 to 1.6.5 |
| cflow.routersc | IPv4 address | Router Shortcut | 1.0.0 to 1.6.5 |
| cflow.sampler_id | Unsigned integer, 1 byte | SamplerID | 1.6.0 to 1.6.5 |
| cflow.sampler_mode | Unsigned integer, 1 byte | SamplerMode | 1.0.0 to 1.6.5 |
| cflow.sampler_name | Character string | SamplerName | 1.0.0 to 1.6.5 |
| cflow.sampler_random_interval | Unsigned integer, 4 bytes | SamplerRandomInterval | 1.0.0 to 1.6.5 |
| cflow.samplerate | Unsigned integer, 2 bytes | SampleRate | 1.0.0 to 1.6.5 |
| cflow.sampling_algorithm | Unsigned integer, 1 byte | Sampling algorithm | 1.0.0 to 1.6.5 |
| cflow.sampling_interval | Unsigned integer, 4 bytes | Sampling interval | 1.0.0 to 1.6.5 |
| cflow.sampling_packet_interval | Unsigned integer, 4 bytes | Sampling Packet Interval | 1.4.0 to 1.6.5 |
| cflow.sampling_packet_space | Unsigned integer, 4 bytes | Sampling Packet Space | 1.4.0 to 1.6.5 |
| cflow.sampling_population | Unsigned integer, 4 bytes | Sampling Population | 1.4.0 to 1.6.5 |
| cflow.sampling_probability | Floating point (single-precision) | Sampling Probability | 1.4.0 to 1.6.5 |
| cflow.sampling_size | Unsigned integer, 4 bytes | Sampling Size | 1.4.0 to 1.6.5 |
| cflow.sampling_time_interval | Unsigned integer, 4 bytes | Sampling Time Interval | 1.4.0 to 1.6.5 |
| cflow.sampling_time_space | Unsigned integer, 4 bytes | Sampling Time Space | 1.4.0 to 1.6.5 |
| cflow.samplingmode | Unsigned integer, 2 bytes | SamplingMode | 1.0.0 to 1.6.5 |
| cflow.scope | Sequence of bytes | Scope Unknown | 1.0.0 to 1.4.11 |
| cflow.scope_cache | Sequence of bytes | ScopeCache | 1.0.0 to 1.6.5 |
| cflow.scope_field_count | Unsigned integer, 2 bytes | Scope Field Count | 1.4.0 to 1.4.11 |
| cflow.scope_field_length | Unsigned integer, 2 bytes | Scope Field Length | 1.0.0 to 1.4.11 |
| cflow.scope_field_type | Unsigned integer, 2 bytes | Scope Type | 1.0.0 to 1.6.5 |
| cflow.scope_interface | Unsigned integer, 4 bytes | ScopeInterface | 1.0.0 to 1.6.5 |
| cflow.scope_linecard | Sequence of bytes | ScopeLinecard | 1.0.0 to 1.6.5 |
| cflow.scope_system | Sequence of bytes | ScopeSystem | 1.0.0 to 1.6.5 |
| cflow.scope_template | Sequence of bytes | ScopeTemplate | 1.0.0 to 1.6.5 |
| cflow.section_header | Sequence of bytes | SectionHeader | 1.0.0 to 1.6.5 |
| cflow.section_payload | Sequence of bytes | SectionPayload | 1.0.0 to 1.6.5 |
| cflow.selection_sequence_id | Unsigned integer, 8 bytes | Selection Sequence Id | 1.4.0 to 1.6.5 |
| cflow.selector_algorithm | Unsigned integer, 2 bytes | Selector Algorithm | 1.4.0 to 1.6.5 |
| cflow.selector_id | Unsigned integer, 2 bytes | Selector Id | 1.4.0 to 1.6.5 |
| cflow.selector_id_total_pkts_observed | Unsigned integer, 8 bytes | Selector Id Total Pkts Observed | 1.4.0 to 1.6.5 |
| cflow.selector_id_total_pkts_selected | Unsigned integer, 8 bytes | Selector Id Total Pkts Selected | 1.4.0 to 1.6.5 |
| cflow.selector_name | Character string | Selector Name | 1.4.0 to 1.6.5 |
| cflow.sequence | Unsigned integer, 4 bytes | FlowSequence | 1.0.0 to 1.6.5 |
| cflow.session_scope | Unsigned integer, 1 byte | Session Scope | 1.4.0 to 1.6.5 |
| cflow.source_id | Unsigned integer, 4 bytes | SourceId | 1.0.0 to 1.6.5 |
| cflow.srcaddr | IPv4 address | SrcAddr | 1.0.0 to 1.6.5 |
| cflow.srcaddrv6 | IPv6 address | SrcAddr | 1.0.0 to 1.6.5 |
| cflow.srcas | Unsigned integer, 2 bytes | SrcAS | 1.0.0 to 1.6.5 |
| cflow.srcmac | Ethernet or other MAC address | Source Mac Address | 1.2.0 to 1.6.5 |
| cflow.srcmask | Unsigned integer, 1 byte | SrcMask | 1.0.0 to 1.6.5 |
| cflow.srcmaskv6 | Unsigned integer, 1 byte | SrcMask | 1.0.0 to 1.6.5 |
| cflow.srcnet | IPv4 address | SrcNet | 1.0.0 to 1.6.5 |
| cflow.srcnetv6 | IPv6 address | SrcNet | 1.2.0 to 1.6.5 |
| cflow.srcport | Unsigned integer, 2 bytes | SrcPort | 1.0.0 to 1.6.5 |
| cflow.srcprefix | IPv4 address | SrcPrefix | 1.0.0 to 1.6.5 |
| cflow.string_len_long | Unsigned integer, 1 byte | String_len_short | 1.6.0 to 1.6.5 |
| cflow.string_len_short | Unsigned integer, 1 byte | String_len_short | 1.6.0 to 1.6.5 |
| cflow.sys_init_time | Date and time | System Init Time | 1.6.0 to 1.6.5 |
| cflow.sysuptime | Unsigned integer, 4 bytes | SysUptime | 1.0.0 to 1.6.5 |
| cflow.tcp_ack_num | Unsigned integer, 4 bytes | TCP Acknowledgement Number | 1.6.0 to 1.6.5 |
| cflow.tcp_header_length | Unsigned integer, 1 byte | TCP Header Length | 1.2.0 to 1.6.5 |
| cflow.tcp_option_map | Sequence of bytes | TCP OptionMap | 1.2.0 to 1.6.5 |
| cflow.tcp_seq_num | Unsigned integer, 4 bytes | TCP Sequence Number | 1.2.0 to 1.6.5 |
| cflow.tcp_urg_ptr | Unsigned integer, 4 bytes | TCP Urgent Pointer | 1.2.0 to 1.6.5 |
| cflow.tcp_window_scale | Unsigned integer, 2 bytes | Tcp Window Scale | 1.4.0 to 1.6.5 |
| cflow.tcp_windows_size | Unsigned integer, 2 bytes | TCP Windows Size | 1.0.0 to 1.6.5 |
| cflow.tcpflags | Unsigned integer, 1 byte | TCP Flags | 1.0.0 to 1.6.5 |
| cflow.template_field_count | Unsigned integer, 2 bytes | Field Count | 1.0.0 to 1.6.5 |
| cflow.template_field_length | Unsigned integer, 2 bytes | Length | 1.0.0 to 1.6.5 |
| cflow.template_field_pen | Unsigned integer, 4 bytes | PEN | 1.2.0 to 1.4.11 |
| cflow.template_field_type | Unsigned integer, 2 bytes | Type | 1.0.0 to 1.6.5 |
| cflow.template_flowset_id | Unsigned integer, 2 bytes | Template FlowSet | 1.0.0 to 1.4.11 |
| cflow.template_id | Unsigned integer, 2 bytes | Template Id | 1.0.0 to 1.6.5 |
| cflow.template_ipfix_field_pen | Unsigned integer, 4 bytes | PEN | 1.6.0 to 1.6.5 |
| cflow.template_ipfix_field_type | Unsigned integer, 2 bytes | Type | 1.6.0 to 1.6.5 |
| cflow.template_ipfix_field_type_enterprise | Unsigned integer, 2 bytes | Type | 1.6.0 to 1.6.5 |
| cflow.template_ipfix_pen_provided | Boolean | Pen provided | 1.6.0 to 1.6.5 |
| cflow.template_ipfix_scope_field_count | Unsigned integer, 2 bytes | Scope Field Count | 1.6.0 to 1.6.5 |
| cflow.template_ipfix_total_field_count | Unsigned integer, 2 bytes | Total Field Count | 1.6.0 to 1.6.5 |
| cflow.template_ntop_field_type | Unsigned integer, 2 bytes | Type | 1.6.0 to 1.6.5 |
| cflow.template_plixer_field_type | Unsigned integer, 2 bytes | Type | 1.6.0 to 1.6.5 |
| cflow.timedelta | Time offset | Duration | 1.0.0 to 1.6.5 |
| cflow.timeend | Time offset | EndTime | 1.0.0 to 1.6.5 |
| cflow.timestamp | Date and time | Timestamp | 1.0.0 to 1.6.5 |
| cflow.timestart | Time offset | StartTime | 1.0.0 to 1.6.5 |
| cflow.toplabeladdr | IPv4 address | TopLabelAddr | 1.0.0 to 1.6.5 |
| cflow.toplabeladdr_v6 | IPv6 address | TopLabelAddr V6 | 1.6.0 to 1.6.5 |
| cflow.toplabeltype | Unsigned integer, 1 byte | TopLabelType | 1.0.0 to 1.6.5 |
| cflow.tos | Unsigned integer, 1 byte | IP ToS | 1.0.0 to 1.6.5 |
| cflow.total_tcp_ack | Unsigned integer, 8 bytes | Total TCP ack | 1.2.0 to 1.6.5 |
| cflow.total_tcp_fin | Unsigned integer, 8 bytes | Total TCP fin | 1.2.0 to 1.6.5 |
| cflow.total_tcp_psh | Unsigned integer, 8 bytes | Total TCP psh | 1.2.0 to 1.6.5 |
| cflow.total_tcp_rst | Unsigned integer, 8 bytes | Total TCP rst | 1.2.0 to 1.6.5 |
| cflow.total_tcp_syn | Unsigned integer, 8 bytes | Total TCP syn | 1.2.0 to 1.6.5 |
| cflow.total_tcp_urg | Unsigned integer, 8 bytes | Total TCP urg | 1.2.0 to 1.6.5 |
| cflow.ttl_max | Unsigned integer, 1 byte | MaxTTL | 1.0.0 to 1.6.5 |
| cflow.ttl_min | Unsigned integer, 1 byte | MinTTL | 1.0.0 to 1.6.5 |
| cflow.udp_length | Unsigned integer, 2 bytes | UDP Length | 1.0.0 to 1.6.5 |
| cflow.unix_nsecs | Unsigned integer, 4 bytes | CurrentNSecs | 1.0.0 to 1.6.5 |
| cflow.unix_secs | Unsigned integer, 4 bytes | CurrentSecs | 1.0.0 to 1.6.5 |
| cflow.unknown_field_type | Sequence of bytes | Unknown Field Type | 1.6.0 to 1.6.5 |
| cflow.upper_cilimit | Floating point (single-precision) | Upper CILimit | 1.4.0 to 1.6.5 |
| cflow.version | Unsigned integer, 2 bytes | Version | 1.0.0 to 1.6.5 |
| cflow.vlanid | Unsigned integer, 2 bytes | Vlan Id | 1.2.0 to 1.6.5 |
| cflow.vrfname | Character string | VRFname | 1.4.0 to 1.6.5 |
| cflow.wlan_channel_id | Unsigned integer, 1 byte | Wireless LAN Channel Id | 1.2.0 to 1.6.5 |
| cflow.wlan_ssid | Character string | Wireless LAN SSId | 1.2.0 to 1.6.5 |