102 lines
3.3 KiB
CSV
102 lines
3.3 KiB
CSV
|
# The following data is extracted from
|
||
|
|
# https://www.ntop.org/guides/nprobe/flow_information_elements.html
|
||
|
|
# and contains IPFIX element definitions for Private Enterprise Number (PEN)
|
||
|
|
# 35632 (ntop)
|
||
|
|
#
|
||
|
|
# PEN.ID, name, data type
|
||
|
|
35632.1028,protocol_ntop,string
|
||
|
|
35632.1031,l4_src_port_name,string
|
||
|
|
35632.1035,l4_dst_port_name,string
|
||
|
|
35632.1036,l4_srv_port,uint
|
||
|
|
35632.1037,l4_srv_port_name,string
|
||
|
|
35632.80,src_fragments,uint
|
||
|
|
35632.81,dst_fragments,uint
|
||
|
|
35632.123,client_nw_latency_ms,uint
|
||
|
|
35632.124,server_nw_latency_ms,uint
|
||
|
|
35632.78,client_tcp_flags,uint
|
||
|
|
35632.79,server_tcp_flags,uint
|
||
|
|
35632.125,app_latency_ms,uint
|
||
|
|
35632.471,nprobe_ipv4_address,ip
|
||
|
|
35632.82,src_to_dst_max_throughput,uint
|
||
|
|
35632.83,src_to_dst_min_throughput,uint
|
||
|
|
35632.84,src_to_dst_avg_throughput,uint
|
||
|
|
35632.85,dst_to_src_max_throughput,uint
|
||
|
|
35632.86,dst_to_src_min_throughput,uint
|
||
|
|
35632.87,dst_to_src_avg_throughput,uint
|
||
|
|
35632.88,pkts_up_to_128_bytes,uint
|
||
|
|
35632.89,pkts_128_to_256_bytes,uint
|
||
|
|
35632.90,pkts_256_to_512_bytes,uint
|
||
|
|
35632.91,pkts_512_to_1024_bytes,uint
|
||
|
|
35632.92,pkts_1024_to_1514_bytes,uint
|
||
|
|
35632.93,pkts_over_1514_bytes,uint
|
||
|
|
35632.98,cumulative_icmp_type,uint
|
||
|
|
35632.101,src_ip_country,string
|
||
|
|
35632.102,src_ip_city,string
|
||
|
|
35632.103,dst_ip_country,string
|
||
|
|
35632.104,dst_ip_city,string
|
||
|
|
35632.448,src_ip_long,hex
|
||
|
|
35632.449,src_ip_lat,hex
|
||
|
|
35632.450,dst_ip_long,hex
|
||
|
|
35632.451,dst_ip_lat,hex
|
||
|
|
35632.105,flow_proto_port,uint
|
||
|
|
35632.106,upstream_tunnel_id,uint
|
||
|
|
35632.446,upstream_session_id,uint
|
||
|
|
35632.107,longest_flow_pkt,uint
|
||
|
|
35632.108,shortest_flow_pkt,uint
|
||
|
|
35632.127,retransmitted_in_bytes,uint
|
||
|
|
35632.109,retransmitted_in_pkts,uint
|
||
|
|
35632.128,retransmitted_out_bytes,uint
|
||
|
|
35632.110,retransmitted_out_pkts,uint
|
||
|
|
35632.111,ooorder_in_pkts,uint
|
||
|
|
35632.112,ooorder_out_pkts,uint
|
||
|
|
35632.113,untunneled_protocol,proto
|
||
|
|
35632.114,untunneled_ipv4_src_addr,ip
|
||
|
|
35632.115,untunneled_l4_src_port,uint
|
||
|
|
35632.116,untunneled_ipv4_dst_addr,ip
|
||
|
|
35632.117,untunneled_l4_dst_port,uint
|
||
|
|
35632.118,l7_proto,uint
|
||
|
|
35632.119,l7_proto_name,string
|
||
|
|
35632.120,downstream_tunnel_id,uint
|
||
|
|
35632.447,downstream_session_id,uint
|
||
|
|
35632.188,ssl_server_name,string
|
||
|
|
35632.189,bittorrent_hash,string
|
||
|
|
35632.121,flow_user_name,string
|
||
|
|
35632.122,flow_server_name,string
|
||
|
|
35632.126,plugin_name,string
|
||
|
|
35632.396,untunneled_ipv6_src_addr,ip
|
||
|
|
35632.397,untunneled_ipv6_dst_addr,ip
|
||
|
|
35632.347,pkts_ttl_eq_1,uint
|
||
|
|
35632.346,pkts_ttl_2_5,uint
|
||
|
|
35632.334,pkts_ttl_5_32,uint
|
||
|
|
35632.335,pkts_ttl_32_64,uint
|
||
|
|
35632.336,pkts_ttl_64_96,uint
|
||
|
|
35632.337,pkts_ttl_96_128,uint
|
||
|
|
35632.338,pkts_ttl_128_160,uint
|
||
|
|
35632.339,pkts_ttl_160_192,uint
|
||
|
|
35632.340,pkts_ttl_192_224,uint
|
||
|
|
35632.341,pkts_ttl_224_255,uint
|
||
|
|
35632.349,in_src_osi_sap,hex
|
||
|
|
35632.350,out_dst_osi_sap,hex
|
||
|
|
35632.391,duration_in,uint
|
||
|
|
35632.392,duration_out,uint
|
||
|
|
35632.415,tcp_win_min_in,uint
|
||
|
|
35632.416,tcp_win_max_in,uint
|
||
|
|
35632.417,tcp_win_mss_in,uint
|
||
|
|
35632.418,tcp_win_scale_in,uint
|
||
|
|
35632.419,tcp_win_min_out,uint
|
||
|
|
35632.420,tcp_win_max_out,uint
|
||
|
|
35632.421,tcp_win_mss_out,uint
|
||
|
|
35632.422,tcp_win_scale_out,uint
|
||
|
|
35632.438,payload_hash,uint
|
||
|
|
35632.443,src_as_name,string
|
||
|
|
35632.444,dst_as_name,string
|
||
|
|
35632.472,src_to_dst_second_bytes,uint
|
||
|
|
35632.473,dst_to_src_second_bytes,uint
|
||
|
|
35632.489,ja3c_hash,string
|
||
|
|
35632.490,ja3s_hash,string
|
||
|
|
35632.491,src_host_name,string
|
||
|
|
35632.492,dst_host_name,string
|
||
|
|
35632.493,ssl_cipher,uint
|
||
|
|
35632.494,ssl_unsafe_cipher,uint
|
||
|
|
35632.495,ssl_version,uint
|