NetFlow:IDs

From DocWiki

(Difference between revisions)
Jump to: navigation, search
(Replaced content with "<br> * AVC Network Management Partners * NetFlow Home Page <br>")
Line 5: Line 5:
<br>
<br>
-
 
-
 
-
<code>[xml]
 
-
<?xml version="1.0" encoding="UTF-8"?>
 
-
<fieldDefinitions>
 
-
  <field>
 
-
    <id>1</id>
 
-
    <name>IN_BYTES</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Incoming counter with length N x 8 bits for number of bytes
 
-
        associated with an IP  Flow. (Default N=8)   
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>2</id>
 
-
    <name>IN_PKTS</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    The number of incoming packets since the previous report (if any)
 
-
        for this Flow at the Observation Point.       
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>3</id>
 
-
    <name>deltaFlowCount</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    This Information Element specifies the current number of all
 
-
        Flow Records that form the parent population as input to the
 
-
        Flow Selection Process.       
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>4</id>
 
-
    <name>protocolIdentifier</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    The value of the protocol number in the IP packet header.
 
-
        The protocol number identifies the IP packet payload type.
 
-
        Protocol numbers are defined in the IANA Protocol Numbers registry.
 
-
        In Internet Protocol version 4 (IPv4), this is carried in the Protocol
 
-
        field. In Internet Protocol version 6 (IPv6), this is carried in the
 
-
        Next Header field in the last extension header of the packet.     
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>5</id>
 
-
    <name>SRC_TOS</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>flags</semantics>
 
-
    <description>
 
-
    Type of Service byte setting when entering incoming interface.       
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>6</id>
 
-
    <name>TCP_FLAGS</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>flags</semantics>
 
-
    <description>
 
-
    Cumulative of all the TCP flags seen for this flow     
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>7</id>
 
-
    <name>L4_SRC_PORT</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    TCP/UDP source port number e.g. FTP, Telnet, or equivalent     
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>8</id>
 
-
    <name>IPV4_SRC_ADDR</name>
 
-
    <status>current</status>
 
-
    <datatype>ipv4Address</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    IPv4 source address   
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>9</id>
 
-
    <name>SRC_MASK</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>mask</semantics>
 
-
    <description>
 
-
    The number of contiguous bits in the source address subnet mask
 
-
        i.e. the submask in slash notation.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>10</id>
 
-
    <name>INPUT_SNMP</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    Input interface index; default is 4 bytes but higher values could
 
-
        be used.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>11</id>
 
-
    <name>L4_DST_PORT</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    TCP/UDP destination port number e.g. FTP, Telnet, or equivalent
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>12</id>
 
-
    <name>IPV4_DST_ADDR</name>
 
-
    <status>current</status>
 
-
    <datatype>ipv4Address</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    IPv4 destination address 
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>13</id>
 
-
    <name>DST_MASK</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>mask</semantics>
 
-
    <description>
 
-
    The number of contiguous bits in the destination address subnet mask
 
-
        i.e. the submask in slash notation
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>14</id>
 
-
    <name>OUTPUT_SNMP</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    Output interface index; default is 4 bytes but higher values
 
-
        could be used
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>15</id>
 
-
    <name>IPV4_NEXT_HOP</name>
 
-
    <status>current</status>
 
-
    <datatype>ipv4Address</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    IPv4 address of next-hop router
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>16</id>
 
-
    <name>SRC_AS</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    Source BGP autonomous system number where length could be 2 or 4 
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>17</id>
 
-
    <name>DST_AS</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    Destination BGP autonomous system number where length could be 2 or 4
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>18</id>
 
-
    <name>BGP_IPV4_NEXT_HOP</name>
 
-
    <status>current</status>
 
-
    <datatype>ipv4Address</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    Next-hop router IP in the BGP domain
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>19</id>
 
-
    <name>MUL_DST_PKTS</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>
 
-
  IP multicast outgoing packet counter with length N x 8 bits
 
-
        for packets associated with the IP Flow.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>20</id>
 
-
    <name>MUL_DST_BYTES</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>
 
-
    IP multicast outgoing byte counter with length N x 8 bits
 
-
        for bytes associated with the IP Flow
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>21</id>
 
-
    <name>LAST_SWITCHED</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    System uptime at which the last packet of this flow was switched
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>22</id>
 
-
    <name>FIRST_SWITCHED</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    System uptime at which the first packet of this flow was switched
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>23</id>
 
-
    <name>OUT_BYTES</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>
 
-
    Outgoing counter with length N x 8 bits for the number of bytes
 
-
        associated with an IP Flow.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>24</id>
 
-
    <name>OUT_PKTS</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>
 
-
    Outgoing counter with length N x 8 bits for the number of packets
 
-
        associated with an IP Flow.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>25</id>
 
-
    <name>MIN_PKT_LNGTH</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Minimum IP packet length on incoming packets of the flow.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>26</id>
 
-
    <name>MAX_PKT_LNGTH</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Maximum IP packet length on incoming packets of the flow.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>27</id>
 
-
    <name>IPV6_SRC_ADDR</name>
 
-
    <status>current</status>
 
-
    <datatype>ipv6Address</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    IPv6 Source Address
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>28</id>
 
-
    <name>IPV6_DST_ADDR</name>
 
-
    <status>current</status>
 
-
    <datatype>ipv6Address</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    IPv6 Destination Address
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>29</id>
 
-
    <name>IPV6_SRC_MASK</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>mask</semantics>
 
-
    <description>
 
-
    Length of the IPv6 source mask in contiguous bits.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>30</id>
 
-
    <name>IPV6_DST_MASK</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>mask</semantics>
 
-
    <description>
 
-
    Length of the IPv6 destination mask in contiguous bits.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>31</id>
 
-
    <name>IPV6_FLOW_LABEL</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    IPv6 flow label as per RFC 2460 definition.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32</id>
 
-
    <name>ICMP_TYPE_CODE</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    Internet Control Message Protocol (ICMP) packet type;
 
-
        reported as ((ICMP Type * 256) + ICMP code)
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>33</id>
 
-
    <name>MUL_IGMP_TYPE</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    Internet Group Management Protocol (IGMP) packet type.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>34</id>
 
-
    <name>samplingInterval</name>
 
-
    <status>deprecated</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Deprecated in favor of 305 samplingPacketInterval. When using
 
-
        sampled NetFlow, the rate at which packets are sampled - e.g. a
 
-
        value of 100 indicates that one of every 100 packets is sampled.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>35</id>
 
-
    <name>samplingAlgorithm</name>
 
-
    <status>deprecated</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    Deprecated in favor of 304 selectorAlgorithm.
 
-
        The type of algorithm used for sampled NetFlow:
 
-
        1 - Deterministic Sampling;
 
-
        2 - Random Sampling. The values are not compatible with the
 
-
        selectorAlgorithm IE, where "Deterministic" has been replaced by
 
-
        "Systematic count-based" (1) or "Systematic time-based" (2), and
 
-
        "Random" is (3). Conversion is required, see PSAMP parameters.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>38</id>
 
-
    <name>engineType</name>
 
-
    <status>deprecated</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    Type of flow switching engine in a router/switch: RP = 0,
 
-
        VIP/Line card = 1, PFC/DFC = 2. Reserved for internal use on the
 
-
        collector.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>39</id>
 
-
    <name>engineId</name>
 
-
    <status>deprecated</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    VIP or line card slot number of the flow switching engine in a
 
-
        router/switch. Reserved for internal use on the collector.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>43</id>
 
-
    <name>ipv4RouterSc</name>
 
-
    <status>deprecated</status>
 
-
    <datatype>ipv4Address</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    This is a platform-specific field for Catalyst 5000/Catalyst
 
-
        6000 family. It is used to store the address of a router that is
 
-
        being shortcut when performing MultiLayer Switching.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>48</id>
 
-
    <name>samplerId</name>
 
-
    <status>deprecated</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    Deprecated in favor of 302 selectorId. The unique identifier
 
-
        associated with samplerName.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>49</id>
 
-
    <name>samplerMode</name>
 
-
    <status>deprecated</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    Deprecated in favor of 304 selectorAlgorithm. The values are not
 
-
        compatible: selectorAlgorithm=3 is random sampling. The type of
 
-
        algorithm used for sampling data: 1 - deterministic, 2 - random
 
-
        sampling. Use with samplerRandomInterval.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>50</id>
 
-
    <name>samplerRandomInterval</name>
 
-
    <status>deprecated</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Deprecated in favour of 305 samplingPacketInterval. Packet
 
-
        interval at which to sample - in case of random sampling. Used
 
-
        in connection with samplerMode 0x02 (random sampling) value.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>51</id>
 
-
    <name>classId</name>
 
-
    <status>deprecated</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    Deprecated in favour of 302 selectorId. Characterizes the
 
-
        traffic class, i.e. QoS treatment.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>52</id>
 
-
    <name>MIN_TTL</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    Minimum TTL on incoming packets of the flow
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>53</id>
 
-
    <name>MAX_TTL</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    Maximum TTL on incoming packets of the flow
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>54</id>
 
-
    <name>IPV4_IDENT</name>
 
-
    <status>current</status>
 
-
    <datatype>ipv4Address</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    The IPv4 identification field
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>55</id>
 
-
    <name>DST_TOS</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    Type of Service byte setting when exiting outgoing interface
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>56</id>
 
-
    <name>IN_SRC_MAC</name>
 
-
    <status>current</status>
 
-
    <datatype>macAddress</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    Incoming source MAC address
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>57</id>
 
-
    <name>OUT_DST_MAC</name>
 
-
    <status>current</status>
 
-
    <datatype>macAddress</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    Outgoing destination MAC address
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>58</id>
 
-
    <name>SRC_VLAN</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    Virtual LAN identifier associated with ingress interface
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>59</id>
 
-
    <name>DST_VLAN</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    Virtual LAN identifier associated with egress interface
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>60</id>
 
-
    <name>IP_PROTOCOL_VERSION</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    Internet Protocol Version Set to 4 for IPv4, set to 6 for IPv6.
 
-
        If not present in the template, then version 4 is assumed.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>61</id>
 
-
    <name>DIRECTION</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    Flow direction: 0 - ingress flow, 1 - egress flow
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>62</id>
 
-
    <name>IPV6_NEXT_HOP</name>
 
-
    <status>current</status>
 
-
    <datatype>ipv6Address</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    IPv6 address of the next-hop router
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>63</id>
 
-
    <name>BGP_IPV6_NEXT_HOP</name>
 
-
    <status>current</status>
 
-
    <datatype>ipv6Address</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    Next-hop router in the BGP domain
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>64</id>
 
-
    <name>IPV6_OPTION_HEADERS</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics></semantics>
 
-
    <description>
 
-
    Bit-encoded field identifying IPv6 option headers found in the flow
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>65</id>
 
-
    <name>PACKET_LOSS</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics></semantics>
 
-
    <description>
 
-
    PfR - Packet loss can be estimated by tracking the highest
 
-
        TCP sequence number detected for a TCP flow.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>66</id>
 
-
    <name>UNREACHABILITY</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics></semantics>
 
-
    <description>
 
-
    PfR - Number of unsuccessful TCP connection attempts/flows for a prefix.
 
-
        TCP syn timeout is used to track unreachability of a host.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>67</id>
 
-
    <name>LATENCY</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics></semantics>
 
-
    <description>
 
-
    PfR - Average delay for TCP flows within a prefix.
 
-
        Latency is the time between TCP SYN and TCP ACK. 
 
-
        Notice that the TCP SYN and TCP ACK both flow in the same direction.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>68</id>
 
-
    <name>DATA_POINTS</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics></semantics>
 
-
    <description>
 
-
    PfR - Number of delay samples collected for a prefix.
 
-
        This is used for calculating average delay to reach a prefix.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>69</id>
 
-
    <name>VARIANCE</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics></semantics>
 
-
    <description>
 
-
    * tNF: NF_V9_FIELD_OER_APPL_ID.
 
-
* FNF/PfR: Jitter.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>70</id>
 
-
    <name>MPLS_LABEL_1</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned24</datatype>
 
-
    <semantics></semantics>
 
-
    <description>
 
-
    MPLS label at position 1 in the stack.
 
-
        This comprises 20 bits of MPLS label, 3 EXP (experimental) bits and 1 S (end-of-stack) bit.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>71</id>
 
-
    <name>MPLS_LABEL_2</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned24</datatype>
 
-
    <semantics></semantics>
 
-
    <description>
 
-
    MPLS label at position 2 in the stack.
 
-
        This comprises 20 bits of MPLS label, 3 EXP (experimental) bits and 1 S (end-of-stack) bit.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>72</id>
 
-
    <name>MPLS_LABEL_3</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned24</datatype>
 
-
    <semantics></semantics>
 
-
    <description>
 
-
    MPLS label at position 3 in the stack.
 
-
        This comprises 20 bits of MPLS label, 3 EXP (experimental) bits and 1 S (end-of-stack) bit.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>73</id>
 
-
    <name>MPLS_LABEL_4</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned24</datatype>
 
-
    <semantics></semantics>
 
-
    <description>
 
-
    MPLS label at position 4 in the stack.
 
-
        This comprises 20 bits of MPLS label, 3 EXP (experimental) bits and 1 S (end-of-stack) bit.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>74</id>
 
-
    <name>MPLS_LABEL_5</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned24</datatype>
 
-
    <semantics></semantics>
 
-
    <description>
 
-
    MPLS label at position 5 in the stack.
 
-
        This comprises 20 bits of MPLS label, 3 EXP (experimental) bits and 1 S (end-of-stack) bit.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>75</id>
 
-
    <name>MPLS_LABEL_6</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned24</datatype>
 
-
    <semantics></semantics>
 
-
    <description>
 
-
    MPLS label at position 6 in the stack.
 
-
        This comprises 20 bits of MPLS label, 3 EXP (experimental) bits and 1 S (end-of-stack) bit.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>76</id>
 
-
    <name>MPLS_LABEL_7</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned24</datatype>
 
-
    <semantics></semantics>
 
-
    <description>
 
-
    MPLS label at position 7 in the stack.
 
-
        This comprises 20 bits of MPLS label, 3 EXP (experimental) bits and 1 S (end-of-stack) bit.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>77</id>
 
-
    <name>MPLS_LABEL_8</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned24</datatype>
 
-
    <semantics></semantics>
 
-
    <description>
 
-
    MPLS label at position 8 in the stack.
 
-
        This comprises 20 bits of MPLS label, 3 EXP (experimental) bits and 1 S (end-of-stack) bit.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>78</id>
 
-
    <name>MPLS_LABEL_9</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned24</datatype>
 
-
    <semantics></semantics>
 
-
    <description>
 
-
    MPLS label at position 9 in the stack.
 
-
        This comprises 20 bits of MPLS label, 3 EXP (experimental) bits and 1 S (end-of-stack) bit.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>79</id>
 
-
    <name>MPLS_LABEL_10</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned24</datatype>
 
-
    <semantics></semantics>
 
-
    <description>
 
-
    MPLS label at position 10 in the stack.
 
-
        This comprises 20 bits of MPLS label, 3 EXP (experimental) bits and 1 S (end-of-stack) bit.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>80</id>
 
-
    <name>IN_DST_MAC</name>
 
-
    <status>current</status>
 
-
    <datatype>macAddress</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    Incoming destination MAC address.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>81</id>
 
-
    <name>OUT_SRC_MAC</name>
 
-
    <status>current</status>
 
-
    <datatype>macAddress</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    Outgoing source MAC address.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>82</id>
 
-
    <name>IF_NAME</name>
 
-
    <status>current</status>
 
-
    <datatype>string</datatype>
 
-
    <semantics>name</semantics>
 
-
    <description>
 
-
    Shortened interface name e.g. "FE1/0". (Default length specified in template).
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>83</id>
 
-
    <name>IF_DESC</name>
 
-
    <status>current</status>
 
-
    <datatype>string</datatype>
 
-
    <semantics>name</semantics>
 
-
    <description>
 
-
    Full interface name e.g. FastEthernet 1/0. (Default length specified in template).
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>84</id>
 
-
    <name>samplerName</name>
 
-
    <status>deprecated</status>
 
-
    <datatype>string</datatype>
 
-
    <semantics></semantics>
 
-
    <description>
 
-
    Name of the flow sampler.
 
-
        Deprecated in favor of 335 selectorName.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>85</id>
 
-
    <name>IN_PERMANENT_BYTES</name>
 
-
    <status>deprecated</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics></semantics>
 
-
    <description>
 
-
    Running byte counter for a permanent flow.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>86</id>
 
-
    <name>IN_PERMANENT_PKTS</name>
 
-
    <status>deprecated</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics></semantics>
 
-
    <description>
 
-
    Running packet counter for a permanent flow.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>88</id>
 
-
    <name>FRAGMENT_OFFSET</name>
 
-
    <status>deprecated</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    The fragment-offset value from fragmented IP packets.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>89</id>
 
-
    <name>forwardingStatus</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    This Information Element describes the forwarding status of the
 
-
        flow and any attached reasons. The Reduced Size Encoding rules
 
-
        as per RFC5101 apply.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>90</id>
 
-
    <name>MPLS_PAL_RD</name>
 
-
    <status>current</status>
 
-
    <datatype>octetArray</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>MPLS PAL Route Distinguisher.&#13;
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>91</id>
 
-
    <name>MPLS_PREFIX_LEN</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics></semantics>
 
-
    <description>
 
-
    Number of consecutive bits in the MPLS prefix length.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>92</id>
 
-
    <name>srcTrafficIndex</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    tbd
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>93</id>
 
-
    <name>dstTrafficIndex</name>
 
-
    <status>current</status>
 
-
    <datatype>TBD</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    tbd
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>94</id>
 
-
    <name>applicationDescription</name>
 
-
    <status>current</status>
 
-
    <datatype>string</datatype>
 
-
    <semantics>name</semantics>
 
-
    <description>Application description.  &#13;
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>95</id>
 
-
    <name>applicationId</name>
 
-
    <status>current</status>
 
-
    <datatype>octetArray</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    8 bits of engine ID, followed by n bits of classification.
 
-
 
-
    1. 8 bits of Classification Engine ID
 
-
    The Classification Engine can be considered as a
 
-
    specific registry for application assignments.
 
-
 
 
-
  2. m bits of Selector ID. The Selector ID length varies
 
-
    depending on the Classification Engine ID.
 
-
 
-
      Classification Engine ID
 
-
   
 
-
        A unique identifier for the engine which determined the
 
-
        Selector ID.  Thus the Classification Engine ID defines
 
-
        the context for the Selector ID.
 
-
   
 
-
        Selector ID
 
-
   
 
-
        A unique identifier of the application for a specific
 
-
        Classification Engine ID.  Note that the Selector ID
 
-
        length varies depending on the Classification Engine ID.
 
-
   
 
-
        The Selector ID term is in sync with the selectorId
 
-
        Information Element, specified in the PSAMP Protocol.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>96</id>
 
-
    <name>applicationName</name>
 
-
    <status>current</status>
 
-
    <datatype>string</datatype>
 
-
    <semantics>name</semantics>
 
-
    <description>
 
-
    Specifies the name of an application.
 
-
        Used by NBAR, in the application name option table.
 
-
        The table lists the application ID, application name, and application description.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>98</id>
 
-
    <name>postipDiffServCodePoint</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics></semantics>
 
-
    <description>
 
-
    The value of a Differentiated Services Code Point (DSCP)
 
-
        encoded in the Differentiated Services Field, after modification.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>99</id>
 
-
    <name>replicationFactor</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics></semantics>
 
-
    <description>
 
-
    Multicast replication factor.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>100</id>
 
-
    <name>className</name>
 
-
    <status>deprecated</status>
 
-
    <datatype>string</datatype>
 
-
    <semantics></semantics>
 
-
    <description>
 
-
    Deprecated in favor of 335 selectorName. Traffic Class Name,
 
-
        associated with the classId Information Element.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>102</id>
 
-
    <name>layer2packetSectionOffset</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Layer 2 packet section offset. Potentially a generic packet
 
-
        section offset. 
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>103</id>
 
-
    <name>layer2packetSectionSize</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Layer 2 packet section size. Potentially a generic packet
 
-
        section size.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>104</id>
 
-
    <name>layer2packetSectionData</name>
 
-
    <status>current</status>
 
-
    <datatype>octetArray</datatype>
 
-
    <semantics></semantics>
 
-
    <description>
 
-
    Layer 2 packet section data.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>111</id>
 
-
    <name>rangeEnd</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>description</semantics>
 
-
    <description>
 
-
    Range end for describing the parameters needed to interpret a field.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>128</id>
 
-
    <name>bgpNextAdjacentAsNumber</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>The autonomous system (AS) number of the next BGP hop to which packets of this flow are forwarded. N can be 2 or 4.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>129</id>
 
-
    <name>bgpPrevAdjacentAsNumber</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>The autonomous system (AS) number of the next IP hop to which packets of this flow are forwarded. N can be 2 or 4.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>130</id>
 
-
    <name>exporterIPv4Address</name>
 
-
    <status>current</status>
 
-
    <datatype>ipv4Address</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>The IPv4 address used by the exporting process.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>131</id>
 
-
    <name>exporterIPv6Address</name>
 
-
    <status>current</status>
 
-
    <datatype>ipv6Address</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>The IPv6 address used by the exporting process.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>132</id>
 
-
    <name>droppedOctetDeltaCount</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>deltaCounter</semantics>
 
-
    <description>The number of octets in packets of this flow dropped by packet treatment.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>133</id>
 
-
    <name>droppedPacketDeltaCount</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>deltaCounter</semantics>
 
-
    <description>The number of octets in packets of this flow dropped by packet treatment.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>134</id>
 
-
    <name>droppedOctetTotalCount</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>The number of packets of this flow dropped by packet treatment.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>135</id>
 
-
    <name>droppedPacketTotalCount</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>The number of packets of this flow dropped by packet treatment.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>136</id>
 
-
    <name>flowEndReason</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>The reason for flow termination.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>137</id>
 
-
    <name>commonPropertiesId</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>An identifier of a set of common properties.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>138</id>
 
-
    <name>observationPointId</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>An identifier of an Observation Point.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>139</id>
 
-
    <name>icmpTypeCodeIPv6</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>Type and Code of the IPv6 ICMP message. type * 256) + code.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>140</id>
 
-
    <name>mplsTopLabelIPv6Address</name>
 
-
    <status>current</status>
 
-
    <datatype>ipv6Address</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>The IPv6 address of the system that the MPLS top label will cause this packet to be forwarded to.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>141</id>
 
-
    <name>lineCardId</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>A locally unique identifier of a line card at an IPFIX Device hosting an Observation Point.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>142</id>
 
-
    <name>portId</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>A locally unique identifier of a line port at an IPFIX Device hosting an Observation Point.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>143</id>
 
-
    <name>meteringProcessId</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>A locally unique identifier of a Metering Process at an IPFIX Device.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>144</id>
 
-
    <name>exportingProcessId</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>A locally unique identifier of an Exporting Process at an IPFIX Device.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>145</id>
 
-
    <name>templateId</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>An identifier of a Template that is locally unique to an Exporting Process.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>146</id>
 
-
    <name>wlanChannelId</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>The identifier of the 802.11 (Wi-Fi) channel used.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>147</id>
 
-
    <name>wlanSsid</name>
 
-
    <status>current</status>
 
-
    <datatype>string</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>The Service Set IDentifier (SSID) identifying an 802.11 (Wi-Fi) network used.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>148</id>
 
-
    <name>flowId</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>An identifier of a Flow that is locally unique to an Exporting Process.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>149</id>
 
-
    <name>sourceId</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>An identifier of an Observation Domain that is locally unique to an Exporting Process.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>150</id>
 
-
    <name>flowStartSeconds</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>The absolute timestamp of the first packet of this Flow.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>151</id>
 
-
    <name>flowEndSeconds</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>The absolute timestamp of the last packet of this Flow.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>152</id>
 
-
    <name>flowStartMilliSeconds</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>The absolute timestamp of the first packet of this Flow.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>153</id>
 
-
    <name>flowEndMilliSeconds</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>The absolute timestamp of the last packet of this Flow.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>154</id>
 
-
    <name>flowStartMicroSeconds</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>The absolute timestamp of the first packet of this Flow.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>155</id>
 
-
    <name>flowEndMicroSeconds</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>The absolute timestamp of the last packet of this Flow.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>156</id>
 
-
    <name>flowStartNanoSeconds</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>The absolute timestamp of the first packet of this Flow.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>157</id>
 
-
    <name>flowEndNanoSeconds</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>The absolute timestamp of the last packet of this Flow.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>158</id>
 
-
    <name>flowStartDeltaMicroSeconds</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>The negative time offset of the first observed packet of this Flow relative to the export time specified in the IPFIX Message header.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>159</id>
 
-
    <name>flowEndDeltaMicroSeconds</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>The negative time offset of the last observed packet of this Flow relative to the export time specified in the IPFIX Message header.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>160</id>
 
-
    <name>systemInitTimeMilliSeconds</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>The absolute timestamp of the last (re-)initialization of the IPFIX Device.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>161</id>
 
-
    <name>flowDurationMilliSeconds</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>The difference between in time between the observation of the first packet of this Flow and the observation of the last packet of this Flow.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>162</id>
 
-
    <name>flowDurationMicroSeconds</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>The difference between in time between the observation of the first packet of this Flow and the observation of the last packet of this Flow.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>163</id>
 
-
    <name>observedFlowTotalCount</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>The total number of Flows observed in the Observation Domain since the Metering Process (re-)initialization for this Observation Point.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>164</id>
 
-
    <name>ignoredPacketTotalCount</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>The total number of observed IP packets that the Metering Process did not process since the (re-)initialization of the Metering Process.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>165</id>
 
-
    <name>ignoredOctetTotalCount</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>The total number of octets in observed IP packets that the Metering Process did not process since the (re-)initialization of the Metering Process.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>166</id>
 
-
    <name>notSentFlowTotalCount</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>The total number of Flow Records that were generated by the Metering Process and but dropped by the Metering Process or by the Exporting Process instead of sending it to the Collecting Process.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>167</id>
 
-
    <name>notSentPacketTotalCount</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>The total number of packets in Flow Records that were generated by the Metering Process and but dropped by the Metering Process or by the Exporting Process instead of sending it to the Collecting Process.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>168</id>
 
-
    <name>notSentOctetTotalCount</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>The total number of octets in packets in Flow Records that were generated by the Metering Process and but dropped by the Metering Process or by the Exporting Process instead of sending it to the Collecting Process.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>169</id>
 
-
    <name>destinationIPv6Prefix</name>
 
-
    <status>current</status>
 
-
    <datatype>ipv6Address</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>IPv6 destination address prefix.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>170</id>
 
-
    <name>sourceIPv6Prefix</name>
 
-
    <status>current</status>
 
-
    <datatype>ipv6Address</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>IPv6 source address prefix.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>171</id>
 
-
    <name>postOctetTotalCount</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>The definition of this Information Element is identical to the definition of Information Element octetTotalCount, except that it reports a potentially modified value caused by a middlebox function after the packet passed the observation point.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>172</id>
 
-
    <name>postPacketTotalCount</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>The definition of this Information Element is identical to the definition of Information Element packetTotalCount, except that it reports a potentially modified value caused by a middlebox function after the packet passed the observation point.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>173</id>
 
-
    <name>flowKeyIndicator</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>flags</semantics>
 
-
    <description>This set of bit fields is used for marking the Information Elements of a Data Record that serve as Flow Key.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>174</id>
 
-
    <name>postMCastPacketTotalCount</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>The total number of outgoing multicast packets sent for packets of this Flow by a multicast daemon within the Observation Domain since the Metering Process (re-)initialization.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>175</id>
 
-
    <name>postMCastOctetTotalCount</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>The total number of octets in outgoing multicast packets sent for packets of this Flow by a multicast daemon in the Observation Domain since the Metering Process (re-)initialization.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>176</id>
 
-
    <name>icmpTypeIPv4</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>Type of the IPv4 ICMP message.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>177</id>
 
-
    <name>icmpCodeIPv4</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>Code of the IPv4 ICMP message.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>178</id>
 
-
    <name>icmpTypeIPv6</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>Type of the IPv6 ICMP message.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>179</id>
 
-
    <name>icmpCodeIPv6</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>Code of the IPv6 ICMP message.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>180</id>
 
-
    <name>udpSourcePort</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>The source port identifier in the UDP header.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>181</id>
 
-
    <name>udpDestinationPort</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>The destination port identifier in the UDP header.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>182</id>
 
-
    <name>tcpSourcePort</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>The source port identifier in the TCP header.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>183</id>
 
-
    <name>tcpDestinationPort</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>The destination port identifier in the TCP header.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>184</id>
 
-
    <name>tcpSequenceNumber</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics></semantics>
 
-
    <description>The sequence number in the TCP header.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>185</id>
 
-
    <name>tcpAcknowledgementNumber</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics></semantics>
 
-
    <description>The acknowledgement number in the TCP header.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>186</id>
 
-
    <name>tcpWindowSize</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics></semantics>
 
-
    <description>The window field in the TCP header.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>187</id>
 
-
    <name>tcpUrgentPointer</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics></semantics>
 
-
    <description>The urgent pointer in the TCP header.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>188</id>
 
-
    <name>tcpHeaderLength</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics></semantics>
 
-
    <description>The length of the TCP header.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>189</id>
 
-
    <name>ipHeaderLength</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics></semantics>
 
-
    <description>The length of the IP header. For IPv6, the value of this Information Element is 40.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>190</id>
 
-
    <name>totalLengthIPv4</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics></semantics>
 
-
    <description>The total length of the IPv4 packet.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>191</id>
 
-
    <name>payloadLengthIPv6</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics></semantics>
 
-
    <description>The length of the IPv6 payload, i.e., the rest of the packet following the IPv6 header, in octets.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>192</id>
 
-
    <name>ipTimeToLive</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics></semantics>
 
-
    <description>The value of the Time to Live field in the IPv4 packet header.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>193</id>
 
-
    <name>nextHeaderIPv6</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics></semantics>
 
-
    <description>The value of the Next Header field of the IPv6 header.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>194</id>
 
-
    <name>mplsPayloadLength</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics></semantics>
 
-
    <description>The size of the MPLS packet without the label stack.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>195</id>
 
-
    <name>ipDiffServCodePoint</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>The value of a Differentiated Services Code Point (DSCP) encoded in the Differentiated Services Field.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>196</id>
 
-
    <name>ipPrecedence</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>The value of the IP Precedence.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>197</id>
 
-
    <name>fragmentFlagsIPv4</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>flags</semantics>
 
-
    <description>The value of the fragmentation bits in the IPv4 packet header.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>198</id>
 
-
    <name>octetDeltaSumOfSquares</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics></semantics>
 
-
    <description>The sum of the squared numbers of octets per incoming packet since the previous report (if any) for this Flow at the Observation Point.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>199</id>
 
-
    <name>octetTotalSumOfSquares</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics></semantics>
 
-
    <description>The total sum of the squared numbers of octets in incoming packets for this Flow at the Observation Point since the Metering Process (re-)initialization for this Observation Point.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>200</id>
 
-
    <name>mplsTopLabelTtl</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics></semantics>
 
-
    <description>The TTL field from the top MPLS label stack entry, i.e. the last label that was pushed.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>201</id>
 
-
    <name>mplsLabelStackLength</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics></semantics>
 
-
    <description>The size of the MPLS label stack.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>202</id>
 
-
    <name>mplsLabelStackDepth</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics></semantics>
 
-
    <description>The number of labels in the MPLS label stack.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>203</id>
 
-
    <name>mplsTopLabelExp</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>flags</semantics>
 
-
    <description>The Exp field from the top MPLS label stack entry, i.e. the last label that was pushed.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>204</id>
 
-
    <name>ipPayloadLength</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics></semantics>
 
-
    <description>The length of the IP payload.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>205</id>
 
-
    <name>udpMessageLength</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics></semantics>
 
-
    <description>The length of the UDP message.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>206</id>
 
-
    <name>isMulticast</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>flags</semantics>
 
-
    <description>Multicast indication bitfield.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>207</id>
 
-
    <name>internetHeaderLengthIPv4</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics></semantics>
 
-
    <description>The length of the IPv4 header.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>208</id>
 
-
    <name>ipv4Options</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>flags</semantics>
 
-
    <description>IPv4 options in packets of this Flow. The information is encoded in a set of bit fields.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>209</id>
 
-
    <name>tcpOptions</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>flags</semantics>
 
-
    <description>TCP options in packets of this Flow. The information is encoded in a set of bit fields.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>210</id>
 
-
    <name>paddingOctets</name>
 
-
    <status>current</status>
 
-
    <datatype>octetArray</datatype>
 
-
    <semantics></semantics>
 
-
    <description>The value of this Information Element is always 0.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>212</id>
 
-
    <name>collectorIPv6Address</name>
 
-
    <status>current</status>
 
-
    <datatype>ipv6Address</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>An IPv6 address to which the Exporting Process sends Flow information.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>213</id>
 
-
    <name>collectorInterface</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>The index of the interface from which IPFIX Messages sent by the Exporting Process to a Collector leave the IPFIX Device.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>214</id>
 
-
    <name>collectorProtocolVersion</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>The protocol version used by the Exporting Process for sending Flow information.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>215</id>
 
-
    <name>collectorTransportProtocol</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>The value of the protocol number used by the Exporting Process for sending Flow information.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>216</id>
 
-
    <name>exporterTransportPort</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>The destination port identifier to which the Exporting Process sends Flow information.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>217</id>
 
-
    <name>exporterTransportPort</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>The source port identifier from which the Exporting Process sends Flow information.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>218</id>
 
-
    <name>tcpSynTotalCount</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>The total number of packets of this Flow with TCP SYN flag set.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>219</id>
 
-
    <name>tcpFinTotalCount</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>The total number of packets of this Flow with TCP FIN flag set.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>220</id>
 
-
    <name>tcpRstTotalCount</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>The total number of packets of this Flow with TCP RST flag set.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>221</id>
 
-
    <name>tcpPshTotalCount</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>The total number of packets of this Flow with TCP PSH flag set.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>222</id>
 
-
    <name>tcpAckTotalCount</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>The total number of packets of this Flow with TCP ACK flag set.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>223</id>
 
-
    <name>tcpUrgTotalCount</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>The total number of packets of this Flow with TCP URG flag set.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>224</id>
 
-
    <name>ipTotalLength</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics></semantics>
 
-
    <description>The total length of the IP packet.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>225</id>
 
-
    <name>postNATSrcAddrIPv4</name>
 
-
    <status>current</status>
 
-
    <datatype>ipv4Address</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>See #40001.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>226</id>
 
-
    <name>postNATDstAddrIPv4</name>
 
-
    <status>current</status>
 
-
    <datatype>ipv4Address</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>See #40002.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>227</id>
 
-
    <name>postNATSrcPort</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>See #40003.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>228</id>
 
-
    <name>postNATDstPort</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>See #40004.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>229</id>
 
-
    <name>natOriginatingAddressRealm</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>flags</semantics>
 
-
    <description>NAT has two address realms, private and public. This field qualifies the source and destination address in the record to understand where the flow is originated from:
 
-
1 - Private,
 
-
2 - Public.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>230</id>
 
-
    <name>natEvent</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>flags</semantics>
 
-
    <description>1 - Create, &#13;
 
-
2 - Delete, &#13;
 
-
3 - Pool exhausted. &#13;
 
-
Create event is generated when a NAT translation is created (either dynamically or statically).&#13;
 
-
Delete event is generated when a NAT translation is deleted.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>231</id>
 
-
    <name>fwInitiatorOctets</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics></semantics>
 
-
    <description>Total number of L4 payload bytes in flow from initiator.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>232</id>
 
-
    <name>fwResponderOctets</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics></semantics>
 
-
    <description>Total number of L4 payload bytes in flow from responder.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>233</id>
 
-
    <name>fwEvent</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics></semantics>
 
-
    <description>See #40005. High level event code.
 
-
0 - Ignore (invalid).
 
-
1 - Flow Created.
 
-
2 - Flow Deleted.
 
-
3 - Flow Denied.
 
-
4 - Flow Alert (Need to add to standard)</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>234</id>
 
-
    <name>ingressVRFID</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics></semantics>
 
-
    <description>Ingress VRF ID.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>235</id>
 
-
    <name>egressVRFID</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics></semantics>
 
-
    <description>Egress VRF ID.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>236</id>
 
-
    <name>VRFname</name>
 
-
    <status>current</status>
 
-
    <datatype>string</datatype>
 
-
    <semantics></semantics>
 
-
    <description>VRF name string.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>237</id>
 
-
    <name>postMplsTopLabelExp</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>flags</semantics>
 
-
    <description>See mplsTopLabelExp.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>238</id>
 
-
    <name>tcpWindowScale</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics></semantics>
 
-
    <description>The scale of the window field in the TCP header.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>239</id>
 
-
    <name>biflowDirection</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>0x00 arbitrary, &#13;
 
-
0x01 initiator, &#13;
 
-
0x02 reverseInitiator, &#13;
 
-
0x03 perimeter</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>240</id>
 
-
    <name>ethernetHeaderLength</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>The difference between the length of an Ethernet frame (minus the FCS) and the length of its MAC Client Data section (including any padding) as defined in section 3.1 of IEEE 802.3-2005. It does not include the Preamble, SFD and Extension field lengths.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>241</id>
 
-
    <name>ethernetPayloadLength</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>The length of the MAC Client Data section (including any padding) of a frame as defined in section 3.1 of IEEE 802.3-2005.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>242</id>
 
-
    <name>ethernetTotalLength</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>The total length of the Ethernet frame (excluding the Preamble, SFD, Extension and FCS fields) as defined in section 3.1 of IEEE 802-3.2005.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>243</id>
 
-
    <name>dot1qVlanId</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>The value of the 12-bit VLAN identifier portion of the Tag Control Information field of an Ethernet frame as specified in section 3.5.5 of IEEE 802-3.2005. The structure and semantics within the Tag Control Information field are defined in IEEE P802.1Q. In case of a QinQ frame, it represents the outer tag VLAN identifier and in case of an IEEE 802.1ad frame it represents the Service VLAN identifier in the S-TAG Tag Control Information (TCI) field as specified in IEEE 802-1ad.2005.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>244</id>
 
-
    <name>dot1qPriority</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>The value of the 3-bit User Priority portion of the Tag Control Information field of an Ethernet frame as specified in section 3.5.5 of IEEE 802-3.2005. The structure and semantics within the Tag Control Information field are defined in IEEE P802.1Q. In case of a QinQ frame, it represents the outer tag 3-bit Class of Service (CoS) identifier and in case of an IEEE 802.1ad frame it represents the 3-bit Priority Code Point (PCP) portion of the S-TAG Tag Control Information (TCI) field as specified in IEEE 802-1ad.2005.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>245</id>
 
-
    <name>dot1qCustomerVlanId</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>In case of a QinQ frame, it represents the inner tag (*) VLAN identifier and in case of an IEEE 802.1ad frame it represents the Customer VLAN identifier in the C-TAG Tag Control Information (TCI) field as specified in IEEE 802-1ad.2005. &#13;
 
-
(*) Note: the 801.2Q tag directly following the outer one.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>246</id>
 
-
    <name>dot1qCustomerPriority</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>In case of a QinQ frame, it represents the inner tag (*) Class of Service (CoS) identifier and in case of an IEEE 802.1ad frame it represents the 3-bit Priority Code Point (PCP) portion of the C-TAG Tag Control Information (TCI) field as specified in IEEE 802-1ad.2005. &#13;
 
-
(*) Note: the 801.2Q tag directly following the outer one.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>247</id>
 
-
    <name>metroEvcId</name>
 
-
    <status>current</status>
 
-
    <datatype>string</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>The EVC Service Attribute which uniquely identifies the Ethernet Virtual Connection (EVC) within a Metro Ethernet Network, as defined in section 6.2 of  MEF10.1. This element is encoded in a string of up to 100 characters.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>248</id>
 
-
    <name>metroEvcType</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>The 3-bit EVC Service Attribute which identifies the type of service provided by an Ethernet Virtual Connection (EVC).</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>249</id>
 
-
    <name>pseudoWireId</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>A 32-bit non-zero connection identifier, which together with the Pseudo Wire (PW) type, identifies the Pseudo Wire (PW) as defined in RFC 4447.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>250</id>
 
-
    <name>pseudoWireType</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>The value of this information element identifies the type of MPLS Pseudo Wire (PW) as defined in RFC 4446.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>251</id>
 
-
    <name>pseudoWireControlWord</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>The 32-bit Preferred Pseudo Wire (PW) MPLS Control Word as defined in Section 3 of RFC 4385.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>252</id>
 
-
    <name>ingressPhysicalInterface</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>The index of a networking device physical interface (example, a switch port) where packets of this flow are being received.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>253</id>
 
-
    <name>egressPhysicalInterface</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>The index of a networking device physical interface (example, a switch port) where packets of this flow are being sent.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>254</id>
 
-
    <name>postDot1qVlanId</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>Post version of #243.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>255</id>
 
-
    <name>postDot1qCustomerVlanId</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>Post version of #245.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>256</id>
 
-
    <name>ethertype</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>The Ethernet type field of an Ethernet frame that identifies the MAC client protocol carried in the payload as defined in paragraph 1.4.349 of IEEE 802.3-2005.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>257</id>
 
-
    <name>postIpPrecedence</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>See ipPrecedence #196.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>258</id>
 
-
    <name>collectionTimeMilliseconds</name>
 
-
    <status>current</status>
 
-
    <datatype></datatype>
 
-
    <semantics>dateTimeMilliseconds</semantics>
 
-
    <description></description>
 
-
  </field>
 
-
  <field>
 
-
    <id>259</id>
 
-
    <name>exportSctpStreamId</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>The value of the SCTP Stream Identifier used by the Exporting Process for exporting IPFIX Message data. This is carried in the Stream Identifier field of the header of the SCTP DATA chunk containing the IPFIX Message(s).</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>260</id>
 
-
    <name>maxExportSeconds</name>
 
-
    <status>current</status>
 
-
    <datatype></datatype>
 
-
    <semantics>dateTimeSeconds</semantics>
 
-
    <description></description>
 
-
  </field>
 
-
  <field>
 
-
    <id>261</id>
 
-
    <name>maxFlowEndSeconds</name>
 
-
    <status>current</status>
 
-
    <datatype></datatype>
 
-
    <semantics>dateTimeSeconds</semantics>
 
-
    <description></description>
 
-
  </field>
 
-
  <field>
 
-
    <id>262</id>
 
-
    <name>messageMD5Checksum</name>
 
-
    <status>current</status>
 
-
    <datatype></datatype>
 
-
    <semantics>octetArray</semantics>
 
-
    <description></description>
 
-
  </field>
 
-
  <field>
 
-
    <id>263</id>
 
-
    <name>messageScope</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics></semantics>
 
-
    <description></description>
 
-
  </field>
 
-
  <field>
 
-
    <id>264</id>
 
-
    <name>minExportSeconds</name>
 
-
    <status>current</status>
 
-
    <datatype>dateTimeSeconds</datatype>
 
-
    <semantics></semantics>
 
-
    <description></description>
 
-
  </field>
 
-
  <field>
 
-
    <id>265</id>
 
-
    <name>minFlowStartSeconds</name>
 
-
    <status>current</status>
 
-
    <datatype>dateTimeSeconds</datatype>
 
-
    <semantics></semantics>
 
-
    <description></description>
 
-
  </field>
 
-
  <field>
 
-
    <id>266</id>
 
-
    <name>opaqueOctets</name>
 
-
    <status>current</status>
 
-
    <datatype>octetArray</datatype>
 
-
    <semantics></semantics>
 
-
    <description></description>
 
-
  </field>
 
-
  <field>
 
-
    <id>267</id>
 
-
    <name>sessionScope</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics></semantics>
 
-
    <description></description>
 
-
  </field>
 
-
  <field>
 
-
    <id>268</id>
 
-
    <name>maxFlowEndMicroseconds</name>
 
-
    <status>current</status>
 
-
    <datatype>dateTimeMicroseconds</datatype>
 
-
    <semantics></semantics>
 
-
    <description></description>
 
-
  </field>
 
-
  <field>
 
-
    <id>269</id>
 
-
    <name>maxFlowEndMilliseconds</name>
 
-
    <status>current</status>
 
-
    <datatype>dateTimeMilliseconds</datatype>
 
-
    <semantics></semantics>
 
-
    <description></description>
 
-
  </field>
 
-
  <field>
 
-
    <id>270</id>
 
-
    <name>maxFlowEndNanoseconds</name>
 
-
    <status>current</status>
 
-
    <datatype>dateTimeNanoseconds</datatype>
 
-
    <semantics></semantics>
 
-
    <description></description>
 
-
  </field>
 
-
  <field>
 
-
    <id>271</id>
 
-
    <name>minFlowStartMicroseconds</name>
 
-
    <status>current</status>
 
-
    <datatype>dateTimeMicroseconds</datatype>
 
-
    <semantics></semantics>
 
-
    <description></description>
 
-
  </field>
 
-
  <field>
 
-
    <id>272</id>
 
-
    <name>minFlowStartMilliseconds</name>
 
-
    <status>current</status>
 
-
    <datatype>dateTimeMilliseconds</datatype>
 
-
    <semantics></semantics>
 
-
    <description></description>
 
-
  </field>
 
-
  <field>
 
-
    <id>273</id>
 
-
    <name>minFlowStartNanoseconds</name>
 
-
    <status>current</status>
 
-
    <datatype>dateTimeNanoseconds</datatype>
 
-
    <semantics></semantics>
 
-
    <description></description>
 
-
  </field>
 
-
  <field>
 
-
    <id>274</id>
 
-
    <name>collectorCertificate</name>
 
-
    <status>current</status>
 
-
    <datatype>octetArray</datatype>
 
-
    <semantics></semantics>
 
-
    <description></description>
 
-
  </field>
 
-
  <field>
 
-
    <id>275</id>
 
-
    <name>exporterCertificate</name>
 
-
    <status>current</status>
 
-
    <datatype>octetArray</datatype>
 
-
    <semantics></semantics>
 
-
    <description></description>
 
-
  </field>
 
-
  <field>
 
-
    <id>276</id>
 
-
    <name>dataRecordsReliability</name>
 
-
    <status>current</status>
 
-
    <datatype>boolean</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>The export reliability of Data Records, within this SCTP stream, for the element(s) in the Options Template scope. A typical example of element for which the export reliability must be reported is the templateID, as a specified in the Data Record Reliability Options Template. A value of *true* means that the Exporting Process MUST send any Data Records associated with the element(s) reliably within this SCTP stream. A value of *false* means that the Exporting Process MAY send any Data Records associated with the element(s) unreliably within this SCTP stream.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>277</id>
 
-
    <name>observationPointType</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>Type of observation point. Values assigned to date are: 1. Physical port 2. Port channel 3. Vlan.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>278</id>
 
-
    <name>connectionCountNew</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>deltaCounter</semantics>
 
-
    <description>This information element counts the number of TCP or UDP connections which were opened during the observation period. The observation period may be specified by the flow start and end timestamps.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>279</id>
 
-
    <name>connectionSumDuration</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics></semantics>
 
-
    <description>This information element aggregates the total time in seconds for all of the TCP or UDP connections which were in use during the observation period. For example if there are 5 concurrent connections each for 10 seconds, the value would be 50 s.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>280</id>
 
-
    <name>connectionTransactionId</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>This information element identifies a transaction within a connection. A transaction is a meaningful exchange of application data between two network devices or a client and server. A transactionId is assigned the first time a flow is reported, so that later reports for the same flow will have the same transactionId. A different transactionId is used for each transaction within a TCP or UDP connection. The identifiers need not be sequential.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>281</id>
 
-
    <name>postNATSourceIPv6Address</name>
 
-
    <status>current</status>
 
-
    <datatype>ipv6Address</datatype>
 
-
    <semantics></semantics>
 
-
    <description>The definition of this Information Element is identical to the definition of Information Element sourceIPv6Address, except that it reports a modified value caused by a NAT64 middlebox function after the packet passed the Observation Point. See [RFC2460] for the definition of the Source Address field in the IPv6 header. See [RFC3234] for the definition of middleboxes. See http://tools.ietf.org/html/draft-ietf-behave-v6v4-xlate-stateful-12 for nat64 specification.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>282</id>
 
-
    <name>postNATDestinationIPv6Address</name>
 
-
    <status>current</status>
 
-
    <datatype>ipv6Address</datatype>
 
-
    <semantics></semantics>
 
-
    <description>The definition of this Information Element is identical to the definition of Information Element destinationIPv6Address, except that it reports a modified value caused by a NAT64 middlebox function after the packet passed the Observation Point. See [RFC2460] for the definition of the Destination Address field in the IPv6 header. See [RFC3234] for the definition of middleboxes. See http://tools.ietf.org/html/draft-ietf-behave-v6v4-xlate-stateful-12 for nat64 specification.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>283</id>
 
-
    <name>natPoolID</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>Locally unique identifier of a NAT pool.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>284</id>
 
-
    <name>natPoolName</name>
 
-
    <status>current</status>
 
-
    <datatype>string</datatype>
 
-
    <semantics></semantics>
 
-
    <description>The name of a NAT pool identified by a natPoolID.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>300</id>
 
-
    <name>observationPointId</name>
 
-
    <status>current</status>
 
-
    <datatype>string</datatype>
 
-
    <semantics></semantics>
 
-
    <description>The name of an observation domain identified by an observationDomainId. Not allocated. See #138.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>301</id>
 
-
    <name>selectionSequenceId</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>From all the packets observed at an Observation Point, a subset of the packets is selected by a sequence of one or more Selectors. The selectionSequenceId is a unique value per Observation Domain, specifying the Observation Point and the sequence of Selectors through which the packets are selected.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>302</id>
 
-
    <name>selectorId</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>The Selector ID is the unique ID identifying a Primitive Selector. Each Primitive Selector must have a unique ID in the Observation Domain.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>303</id>
 
-
    <name>informationElementId</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>This Information Element contains the ID of another Information Element.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>304</id>
 
-
    <name>selectorAlgorithm</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>This Information Element identifies the packet selection methods (e.g., Filtering, Sampling) that are applied by the Selection Process. Most of these methods have parameters. Further Information Elements are needed to fully specify packet selection with these methods and all their parameters. The methods listed below are defined in [RFC5475]. For their parameters, Information Elements are defined in the information model document. The names of these Information Elements are listed for each method identifier. Further method identifiers may be added to the list below. It might be necessary to define new Information Elements to specify their parameters. The selectorAlgorithm registry is maintained by IANA. New assignments for the registry will be administered by IANA, and are subject to Expert Review [RFC5226]. The registry can be updated when specifications of the new method(s) and any new Information Elements are provided. The group of experts must double check the selectorAlgorithm definitions and Information Elements with already defined selectorAlgorithms and Information Elements for completeness, accuracy, and redundancy. Those experts will initially be drawn from the Working Group Chairs and document editors of the IPFIX and PSAMP Working Groups.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>305</id>
 
-
    <name>samplingPacketInterval</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>This Information Element specifies the number of packets that are consecutively sampled. A value of 100 means that 100 consecutive packets are sampled. For example, this Information Element may be used to describe the configuration of a systematic count-based Sampling Selector.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>306</id>
 
-
    <name>samplingPacketSpace</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>This Information Element specifies the number of packets between two samplingPacketInterval. A value of 100 means that the next interval starts 100 packets (which are not sampled) after the current samplingPacketInterval is over. For example, this Information Element may be used to describe the configuration of a systematic count-based Sampling Selector.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>307</id>
 
-
    <name>samplingTimeInterval</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>This Information Element specifies the time interval in microseconds during which all arriving packets are sampled. For example, this Information Element may be used to describe the configuration of a systematic time-based Sampling Selector.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>308</id>
 
-
    <name>samplingTimeSpace</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>This Information Element specifies the time interval in microseconds between two samplingTimeInterval. A value of 100 means that the next interval starts 100 microseconds (during which no packets are sampled) after the current samplingTimeInterval is over. For example, this Information Element may used to describe the configuration of a systematic time-based Sampling Selector.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>309</id>
 
-
    <name>samplingSize</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>This Information Element specifies the number of elements taken from the parent Population for random Sampling methods. For example, this Information Element may be used to describe the configuration of a random n-out-of-N Sampling Selector.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>310</id>
 
-
    <name>samplingPopulation</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>This Information Element specifies the number of elements in the parent Population for random Sampling methods. For example, this Information Element may be used to describe the configuration of a random n-out-of-N Sampling Selector</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>311</id>
 
-
    <name>samplingProbability</name>
 
-
    <status>current</status>
 
-
    <datatype>float64</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>This Information Element specifies the probability that a packet is sampled, expressed as a value between 0 and 1. The probability is equal for every packet. A value of 0 means no packet was sampled since the probability is 0. For example, this Information Element may be used to describe the configuration of a uniform probabilistic Sampling Selector.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>312</id>
 
-
    <name>dataLinkFrameSize</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics></semantics>
 
-
    <description>This Information Element specifies the length of the selected data link frame. The data link layer is defined in [ISO/IEC 7498-1:1994].</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>313</id>
 
-
    <name>ipHeaderPacketSection</name>
 
-
    <status>current</status>
 
-
    <datatype>octetArray</datatype>
 
-
    <semantics></semantics>
 
-
    <description>This Information Element, which may have a variable length, carries a series of octets from the start of the IP header of a sampled packet. With sufficient length, this element also reports octets from the IP payload, subject to [RFC2804]. See the Security Considerations section. The size of the exported section may be constrained due to limitations in the IPFIX protocol. The data for this field MUST NOT be padded.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>314</id>
 
-
    <name>ipPayloadPacketSection</name>
 
-
    <status>current</status>
 
-
    <datatype>octetArray</datatype>
 
-
    <semantics></semantics>
 
-
    <description>This Information Element, which may have a variable length, carries a series of octets from the start of the IP payload of a sampled packet. The IPv4 payload is that part of the packet that follows the IPv4 header and any options, which [RFC791] refers to as *data* or *data octets*. For example, see the examples in [RFC791], APPENDIX A. The IPv6 payload is the rest of the packet following the 40 octet IPv6 header. Note that any extension headers present are considered part of the payload. See [RFC2460] for the IPv6 specification. The size of the exported section may be constrained due to limitations in the IPFIX protocol. The data for this field MUST NOT be padded.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>315</id>
 
-
    <name>dataLinkFrameSection</name>
 
-
    <status>current</status>
 
-
    <datatype>octetArray</datatype>
 
-
    <semantics></semantics>
 
-
    <description>This Information Element carries n octets from the data link frame of a selected frame, starting sectionOffset octets into the frame. The sectionObservedOctets expresses how much data was observed, while the remainder is padding. When the sectionObservedOctets field corresponding to this Information Element exists, this Information Element MAY have a fixed length and MAY be padded, or MAY have a variable length. When the sectionObservedOctets field corresponding to this Information Element does not exist, this Information Element SHOULD have a variable length and MUST NOT be padded. In this case, the size of the exported section may be constrained due to limitations in the IPFIX protocol. Further Information Elements, i.e., dataLinkFrameType and dataLinkFrameSize are needed to specify the data link type and the size of the data link frame of this Information Element. A set of these Information Elements MAY be contained in a structured data type, as expressed in [RFC6313]. Or a set of these Information Elements MAY be contained in one Flow Record as shown in Appendix C of [draft-ietf-ipfix-data-link-layer-monitoring]. The data link layer is defined in [ISO/IEC 7498-1:1994].</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>316</id>
 
-
    <name>mplsLabelStackSection</name>
 
-
    <status>current</status>
 
-
    <datatype>octetArray</datatype>
 
-
    <semantics></semantics>
 
-
    <description>This Information Element, which may have a variable length, carries the first n octets from the MPLS label stack of a sampled packet. With sufficient length, this element also reports octets from the MPLS payload, subject to [RFC2804]. See the Security Considerations section. See [RFC3031] for the specification of MPLS packets. See [RFC3032] for the specification of the MPLS label stack. The size of the exported section may be constrained due to limitations in the IPFIX protocol. The data for this field MUST NOT be padded.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>317</id>
 
-
    <name>mplsPayloadPacketSection</name>
 
-
    <status>current</status>
 
-
    <datatype>octetArray</datatype>
 
-
    <semantics></semantics>
 
-
    <description>This Information Element, which may have a variable length, carries the first n octets from the MPLS payload of a sampled packet, being data that follows immediately after the MPLS label stack. See [RFC3031] for the specification of MPLS packets. See [RFC3032] for the specification of the MPLS label stack. The size of the exported section may be constrained due to limitations in the IPFIX protocol. The data for this field MUST NOT be padded.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>318</id>
 
-
    <name>packetsObserved</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>This Information Element specifies the total number of packets observed by a Selector, for a specific value of SelectorId. This Information Element should be used in an Options Template scoped to the observation to which it refers. See Section 3.4.2.1 of the IPFIX protocol document [RFC5101].</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>319</id>
 
-
    <name>packetsSelected</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>This Information Element specifies the total number of packets selected by a Selector, for a specific value of SelectorId. This Information Element should be used in an Options Template scoped to the observation to which it refers. See Section 3.4.2.1 of the IPFIX protocol document [RFC5101].</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>320</id>
 
-
    <name>fixedError</name>
 
-
    <status>current</status>
 
-
    <datatype>float64</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>This Information Element specifies the maximum possible measurement error of the reported value for a given Information Element. The absoluteError has the same unit as the Information Element with which it is associated. The real value of the metric can differ by absoluteError (positive or negative) from the measured value. This Information Element provides only the error for measured values. If an Information Element contains an estimated value (from Sampling), the confidence boundaries and confidence level have to be provided instead, using the upperCILimit, lowerCILimit, and confidenceLevel Information Elements. This Information Element should be used in an Options Template scoped to the observation to which it refers. See Section 3.4.2.1 of the IPFIX protocol document [RFC5101].</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>321</id>
 
-
    <name>relativeError</name>
 
-
    <status>current</status>
 
-
    <datatype>float64</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>This Information Element specifies the maximum possible positive or negative error ratio for the reported value for a given Information Element as percentage of the measured value. The real value of the metric can differ by relativeError percent (positive or negative) from the measured value. This Information Element provides only the error for measured values. If an Information Element contains an estimated value (from Sampling), the confidence boundaries and confidence level have to be provided instead, using the upperCILimit, lowerCILimit, and confidenceLevel Information Elements. This Information Element should be used in an Options Template scoped to the observation to which it refers. See Section 3.4.2.1 of the IPFIX protocol document [RFC5101].</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>322</id>
 
-
    <name>observationTimeSeconds</name>
 
-
    <status>current</status>
 
-
    <datatype>dateTimeSeconds</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>This Information Element specifies the absolute time in seconds of an observation.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>323</id>
 
-
    <name>observationTimeMilliseconds</name>
 
-
    <status>current</status>
 
-
    <datatype>dateTimeMilliseconds</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>This Information Element specifies the absolute time in milliseconds of an observation.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>324</id>
 
-
    <name>observationTimeMicroseconds</name>
 
-
    <status>current</status>
 
-
    <datatype>dateTimeMicroseconds</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>This Information Element specifies the absolute time in microseconds of an observation.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>325</id>
 
-
    <name>observationTimeNanoseconds</name>
 
-
    <status>current</status>
 
-
    <datatype>dateTimeNanoseconds</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>This Information Element specifies the absolute time in nanoseconds of an observation.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>326</id>
 
-
    <name>digestHashValue</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>This Information Element specifies the value from the digest hash function. See also Sections 6.2, 3.8 and 7.1 of [RFC5475].</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>327</id>
 
-
    <name>hashIPPayloadOffset</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>This Information Element specifies the IP payload offset used by a Hash-based Selection Selector. See also Sections 6.2, 3.8 and 7.1 of [RFC5475].</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>328</id>
 
-
    <name>hashIPPayloadSize</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>This Information Element specifies the IP payload size used by a Hash-based Selection Selector. See also Sections 6.2, 3.8 and 7.1 of [RFC5475].</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>329</id>
 
-
    <name>hashInitialiserValue</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>This Information Element specifies the value for the beginning of a hash function potential output range. See also Sections 6.2, 3.8 and 7.1 of [RFC5475].</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>330</id>
 
-
    <name>hashOutputRangeMin</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>This Information Element specifies the value for the end of a hash function potential output range. See also Sections 6.2, 3.8 and 7.1 of [RFC5475].</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>331</id>
 
-
    <name>hashOutputRangeMax</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>This Information Element specifies the value for the beginning of a hash function selected range. See also Sections 6.2, 3.8 and 7.1 of [RFC5475].</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>332</id>
 
-
    <name>hashSelectedRangeMin</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>This Information Element specifies the value for the end of a hash function selected range. See also Sections 6.2, 3.8 and 7.1 of [RFC5475].</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>333</id>
 
-
    <name>hashSelectedRangeMax</name>
 
-
    <status>current</status>
 
-
    <datatype>boolean</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>This Information Element contains a boolean value that is TRUE if the output from this hash Selector has been configured to be included in the packet report as a packet digest, else FALSE. See also Sections 6.2, 3.8 and 7.1 of [RFC5475].</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>334</id>
 
-
    <name>hashDigestOutput</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>This Information Element specifies the initialiser value to the hash function. See also Sections 6.2, 3.8 and 7.1 of [RFC5475].</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>335</id>
 
-
    <name>selectorName</name>
 
-
    <status>current</status>
 
-
    <datatype>string</datatype>
 
-
    <semantics></semantics>
 
-
    <description>Selector name string. See #302 selectorId. Supersedes #100, classname. The name of a selector identified by a selectorID. Globally unique per Metering Process.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>336</id>
 
-
    <name>upperCILimit</name>
 
-
    <status>current</status>
 
-
    <datatype>float64</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>This Information Element specifies the upper limit of a confidence interval. It is used to provide an accuracy statement for an estimated value. The confidence limits define the range in which the real value is assumed to be with a certain probability p. Confidence limits always need to be associated with a confidence level that defines this probability p. Please note that a confidence interval only provides a probability that the real value lies within the limits. That means the real value can lie outside the confidence limits. The upperCILimit, lowerCILimit, and confidenceLevel Information Elements should all be used in an Options Template scoped to the observation to which they refer. See Section 3.4.2.1 of the IPFIX protocol document [RFC5101]. Note that the upperCILimit, lowerCILimit, and confidenceLevel are all required to specify confidence, and should be disregarded unless all three are specified together.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>337</id>
 
-
    <name>lowerCILimit</name>
 
-
    <status>current</status>
 
-
    <datatype>float64</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>This Information Element specifies the lower limit of a confidence interval. For further information, see the description of upperCILimit. The upperCILimit, lowerCILimit, and confidenceLevel Information Elements should all be used in an Options Template scoped to the observation to which they refer. See Section 3.4.2.1 of the IPFIX protocol document [RFC5101]. Note that the upperCILimit, lowerCILimit, and confidenceLevel are all required to specify confidence, and should be disregarded unless all three are specified together.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>338</id>
 
-
    <name>confidenceLevel</name>
 
-
    <status>current</status>
 
-
    <datatype>float64</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>This Information Element specifies the confidence level. It is used to provide an accuracy statement for estimated values. The confidence level provides the probability p with which the real value lies within a given range. A confidence level always needs to be associated with confidence limits that define the range in which the real value is assumed to be. The upperCILimit, lowerCILimit, and confidenceLevel Information Elements should all be used in an Options Template scoped to the observation to which they refer. See Section 3.4.2.1 of the IPFIX protocol document [RFC5101]. Note that the upperCILimit, lowerCILimit, and confidenceLevel are all required to specify confidence, and should be disregarded unless all three are specified together.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>339</id>
 
-
    <name>informationElementDataType</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics></semantics>
 
-
    <description>A description of the abstract data type of an IPFIX information element.These are taken from the abstract data types defined in section 3.1 of the IPFIX Information Model [RFC5102]; see that section for more information on the types described in the informationElementDataType sub-registry. These types are registered in the IANA IPFIX Information Element Data Type subregistry. This subregistry is intended to assign numbers for type names, not to provide a mechanism for adding data types to the IPFIX Protocol, and as such requires a Standards Action [RFC5226] to modify.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>340</id>
 
-
    <name>informationElementDescription</name>
 
-
    <status>current</status>
 
-
    <datatype>string</datatype>
 
-
    <semantics></semantics>
 
-
    <description>A UTF-8 [RFC3629] encoded Unicode string containing a human-readable description of an Information Element. The content of the informationElementDescription MAY be annotated with one or more language tags [RFC4646], encoded in-line [RFC2482] within the UTF-8 string, in order to specify the language in which the description is written. Description text in multiple languages MAY tag each section with its own language tag; in this case, the description information in each language SHOULD have equivalent meaning. In the absence of any language tag, the "i-default" [RFC2277] language SHOULD be assumed. See the Security Considerations section for notes on string handling for Information Element type records.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>341</id>
 
-
    <name>informationElementName</name>
 
-
    <status>current</status>
 
-
    <datatype>string</datatype>
 
-
    <semantics></semantics>
 
-
    <description>A UTF-8 [RFC3629] encoded Unicode string containing the name of an Information Element, intended as a simple identifier. See the Security Considerations section for notes on string handling for Information Element type records</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>342</id>
 
-
    <name>informationElementRangeBegin</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>Contains the inclusive low end of the range of acceptable values for an Information Element.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>343</id>
 
-
    <name>informationElementRangeEnd</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>Contains the inclusive high end of the range of acceptable values for an Information Element.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>344</id>
 
-
    <name>informationElementSemantics</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics></semantics>
 
-
    <description>A description of the semantics of an IPFIX Information Element. These are taken from the data type semantics defined in section 3.2 of the IPFIX Information Model [RFC5102]; see that section for more information on the types defined in the informationElementSemantics sub-registry. This field may take the values in Table ; the special value 0x00 (default) is used to note that no semantics apply to the field; it cannot be manipulated by a Collecting Process or File Reader that does not understand it a priori. These semantics are registered in the IANA IPFIX Information Element Semantics subregistry. This subregistry is intended to assign numbers for semantics names, not to provide a mechanism for adding semantics to the IPFIX Protocol, and as such requires a Standards Action [RFC5226] to modify.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>345</id>
 
-
    <name>informationElementUnits</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics></semantics>
 
-
    <description>A description of the units of an IPFIX Information Element. These correspond to the units implicitly defined in the Information Element definitions in section 5 of the IPFIX Information Model [RFC5102]; see that section for more information on the types described in the informationElementsUnits sub-registry. This field may take the values in Table 3 below; the special value 0x00 (none) is used to note that the field is unitless. These types are registered in the IANA IPFIX Information Element Units subregistry; new types may be added on a First Come First Served [RFC5226] basis.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>346</id>
 
-
    <name>privateEnterpriseNumber</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>A private enterprise number, as assigned by IANA. Within the context of an Information Element Type record, this element can be used along with the informationElementId element to scope properties to a specific Information Element. To export type information about an IANA-assigned Information Element, set the privateEnterpriseNumber to 0, or do not export the privateEnterpriseNumber in the type record. To export type information about an enterprise-specific Information Element, export the enterprise number in privateEnterpriseNumber, and export the Information Element number with the Enterprise bit cleared in informationElementId. The Enterprise bit in the associated informationElementId Information Element MUST be ignored by the Collecting Process.</description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32769</id>
 
-
    <name>scTag</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    A globally unique value which identifies the type of reporting record.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32770</id>
 
-
    <name>scTrafficProcessorId</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    Indicates which processing unit generated reporting record. Used for debug/troubleshooting.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32771</id>
 
-
    <name>scSourceIpSample</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    The last byte of the source IP of the network flow for which the application generated the report.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32772</id>
 
-
    <name>scDestinationIpSample</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    The last byte of the destination IP of the network flow for which the application generated the report.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32773</id>
 
-
    <name>scFlowContextId</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    The Flow context ID that the current flow is related to. Used for debug/troubleshooting.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32774</id>
 
-
    <name>scSubscriberId</name>
 
-
    <status>current</status>
 
-
    <datatype>string64</datatype>
 
-
    <semantics>name</semantics>
 
-
    <description>
 
-
    The subscriber identification string, introduced through the subscriber management interfaces.
 
-
        For unknown subscriber this field may contain an empty string. The string may be padded with 0.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32775</id>
 
-
    <name>PolicyID (was scPackageId)</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    A numeric value used as an Identifier for the policy profile assigned to the reported entity.
 
-
        (was: “The ID of the policy package/profile assigned to the subscriber”.)
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32776</id>
 
-
    <name>scServiceId</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    Indicates the service classification of the reported session.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32777</id>
 
-
    <name>scProtocolId</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    This field contains the unique ID of the protocol associated with the reported session.
 
-
        For port-based protocols (for example, TCP port 666 for DOOM)
 
-
        and IP-protocol-based protocols (for example, IP protocol 1 for ICMP),
 
-
        the PROTOCOL_ID will be the TCP_GENERIC / UDP_GENERIC/ IP_PROTOCOL value,
 
-
        according to the specific base protocol of the transaction.
 
-
        For possible values see SCAS-BB Reference Guide.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32778</id>
 
-
    <name>scSkipppedSessions</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    The number of unreported sessions since the previous reporting record of this kind.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32779</id>
 
-
    <name>scInitiatingSide</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>flags</semantics>
 
-
    <description>
 
-
    On which side of the SCE platform the initiator of the transaction resides:
 
-
        the subscriber side (0) or the network side (1).
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32780</id>
 
-
    <name>scReportTime</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Ending time stamp of this reporting record.
 
-
        The field is in UNIX time_t format,
 
-
        which is the number of seconds since midnight of 1 January 1970.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32781</id>
 
-
    <name>scTransactionDurationMillisec</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Duration, in milliseconds, of the transaction reported in this reporting record.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32782</id>
 
-
    <name>scTimeFrame</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>flags</semantics>
 
-
    <description>
 
-
    The system supports time-dependent policies, by using different rules for different time frames.
 
-
        This field indicates the time frame during which the reporting record was generated.
 
-
        The field’s value can be in the range 0 to 3, indicating which of the four possible time frames was used.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32783</id>
 
-
    <name>scSessionUpstreamVolume</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Upstream volume of the transaction, in bytes.
 
-
        The volume refers to the aggregated upstream volume on both links
 
-
        of all the flows bundled in the transaction.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32784</id>
 
-
    <name>scSessionDownstreamVolume</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Downstream volume of the transaction, in bytes.
 
-
        The volume refers to the aggregated downstream volume on both links
 
-
        of all the flows bundled in the transaction.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32785</id>
 
-
    <name>scProtocolSignature</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    This field contains the ID of the protocol signature associated with this session. F
 
-
        or possible values see SCAS-BB Reference Guide.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32786</id>
 
-
    <name>scZoneId</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    This field contains the ID of the zone associated with this session.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32787</id>
 
-
    <name>scFlavorId</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    For protocol signatures that have flavors, this field contains the ID
 
-
        of the flavor associated with this session.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32788</id>
 
-
    <name>scFlowCloseMode</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>flags</semantics>
 
-
    <description>
 
-
    The reason for the end of flow.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32789</id>
 
-
    <name>scAccessString</name>
 
-
    <status>current</status>
 
-
    <datatype>string</datatype>
 
-
    <semantics>name</semantics>
 
-
    <description>
 
-
    A Layer 7 property, extracted from the transaction.
 
-
        The content of this field is record-specific and may include host name,
 
-
        server IP, server name, network name etc.
 
-
        (see Table 2-23 in SCAS-BB 3.0 Reference Guide).
 
-
        (length: 128, 256, 512, 1024).
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32790</id>
 
-
    <name>scInfoString</name>
 
-
    <status>current</status>
 
-
    <datatype>string</datatype>
 
-
    <semantics>name</semantics>
 
-
    <description>
 
-
    A Layer 7 property, extracted from the transaction.
 
-
        The content of this field is record-specific and may include URL,
 
-
        sender, login name, group name etc.
 
-
        (see Table 2-23 in SCAS-BB 3.0 Reference Guide).
 
-
        (Length: 128, 256, 512, 1024)
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32791</id>
 
-
    <name>scClientPort</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    For TCP/UDP-based sessions, the port number of the client side (initiator)
 
-
        of the networking session.
 
-
        For non-TCP/UDP sessions, this field has the value zero (0).
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32792</id>
 
-
    <name>scServerPort</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    For TCP/UDP-based sessions, this field contains the destination port number
 
-
        of the networking session.
 
-
        For non-TCP/UDP sessions, this field contains the IP protocol number of the session flow.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32793</id>
 
-
    <name>scSubscriberCounterId</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>
 
-
    Each service is mapped to a counter. There are 32 subscriber counters.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32794</id>
 
-
    <name>scServiceUsageCounterId</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>
 
-
    Each service is mapped to a counter. There are 32 counters in the subscriber scope.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32795</id>
 
-
    <name>scBreachState</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>flags</semantics>
 
-
    <description>
 
-
    Indicates whether the subscriber quota was breached:
 
-
        0, if the quota was not breached
 
-
        and 1, if the quota was breached.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32796</id>
 
-
    <name>scReason</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>flags</semantics>
 
-
    <description>
 
-
    Reason for generation of reporting record:
 
-
        0-period time pass,
 
-
        1-subscriber logout,
 
-
        2 - package switch,
 
-
        3 - wraparound,
 
-
        4 - end of aggregation period
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32797</id>
 
-
    <name>scConfiguredDuration</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Configured period, in seconds, between successive reporting records.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32798</id>
 
-
    <name>scDuration</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Indicates the number of seconds that have passed
 
-
        since the previous reporting record of this type.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32799</id>
 
-
    <name>scEndTime</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Ending time stamp of this reporting record.
 
-
        The field is in UNIX time_t format,
 
-
        which is the number of seconds since midnight of 1 January 1970.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32800</id>
 
-
    <name>scUpstreamVolume</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Aggregated upstream volume on both links of all sessions,
 
-
        in kilobytes, for the current reporting period.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32801</id>
 
-
    <name>scDownstreamVolume</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Aggregated downstream volume on both links of all sessions,
 
-
        in kilobytes, for the current reporting period.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32802</id>
 
-
    <name>scSessions</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Aggregated number of sessions for the reported service,
 
-
        for the current reporting period.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32803</id>
 
-
    <name>scSeconds</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Aggregated number of session seconds for the reported service,
 
-
        for the current reporting period.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32804</id>
 
-
    <name>scPackageCounterId</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    Each package is mapped to a counter and this field contains ID of this counter.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32805</id>
 
-
    <name>scGeneratorId</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    A numeric value identifying the processor generating the reporting record.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32806</id>
 
-
    <name>scServiceGlobalCounterId</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    Each service is mapped to a counter and this field contains ID of this counter.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32807</id>
 
-
    <name>scConcurrentSessions</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Concurrent number of sessions using the reported service at this point in time.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32808</id>
 
-
    <name>scActiveSubscribers</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Concurrent number of subscribers using the reported service at this point in time.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32809</id>
 
-
    <name>scTotalActiveSubscribers</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Concurrent number of subscribers in the system at this point in time.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32810</id>
 
-
    <name>linkId</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    A numeric value associated with the reported network link.
 
-
        (was: “Possible values are 0 and 1
 
-
        - referring to physical links 1 and 2 respectively)”).
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32811</id>
 
-
    <name>scVirtualLinkId</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    A numeric value associated with the reported virtual network link.
 
-
        Possible values are [TBD].
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32812</id>
 
-
    <name>scVirtualLinkDirection</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    A numeric value indicating the reported virtual network link direction.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32813</id>
 
-
    <name>scAggregationObjectId</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    Externally assigned:
 
-
        0 - offline subscriber,
 
-
        1 - online subscriber.
 
-
        Used in Real Time Subscriber Usage RDR.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32814</id>
 
-
    <name>scVendorId</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    The ITU-U vendor ID of the application.
 
-
        A value of 0xFFFFFFFF indicates that this field was not found in the traffic.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32815</id>
 
-
    <name>scUpstreamPacketLoss</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    The average fractional upstream packet loss for the session,
 
-
        taken from the RTCP flow.
 
-
        (Refer to the note following this table for an explanation of this value.) - [TBD]
 
-
        A value of 0xFFFF indicates that this field is undefined (no RTCP flows were opened).
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32816</id>
 
-
    <name>scDownstreamPacketLoss</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    The average fractional downstream packet loss for the session,
 
-
        taken from the RTCP flow.
 
-
        (Refer to the note following this table for an explanation of this value.) - [TBD]
 
-
        A value of 0xFFFF indicates that this field is undefined (no RTCP flows were opened).
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32819</id>
 
-
    <name>scAttackId</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    Unique attack ID.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32820</id>
 
-
    <name>scAttackIp</name>
 
-
    <status>current</status>
 
-
    <datatype>ipv4Address</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    The IP address related to this attack.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32821</id>
 
-
    <name>scAttackOtherIp</name>
 
-
    <status>current</status>
 
-
    <datatype>ipv4Address</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    The other IP address related to this attack if exists,
 
-
        0xFFFFFFFF otherwise.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32822</id>
 
-
    <name>scAttackPortNumber</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    The port number related to this attack, if such exists
 
-
        (if this is an IP scan, for example),
 
-
        or 0xFFFF otherwise in case the info is not relevant (certain types of attacks).
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32823</id>
 
-
    <name>scAttackType</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    Who attackIp belongs to: 0—Attacked, 1—Attacker.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32824</id>
 
-
    <name>scAttackSide</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>flags</semantics>
 
-
    <description>
 
-
    The IP address side: 0—Subscriber, 1—Network.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32825</id>
 
-
    <name>scAttackIpProtocol</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>flags</semantics>
 
-
    <description>
 
-
    IP protocol type: 0—Other, 1—ICMP, 6—TCP, 17—UDP.
 
-
        For possible values see SCAS-BB Reference Guide.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32826</id>
 
-
    <name>scAttacks</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>flags</semantics>
 
-
    <description>
 
-
    The number of attacks in the current reporting period.
 
-
        Since this report is generated per attack, the value is 0 or 1.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32827</id>
 
-
    <name>scAttackMaliciousSessions</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Aggregated number of sessions for the reported attack,
 
-
        for the current reporting period.
 
-
        If the SCE platform blocks the attack, this field takes the value 0xFFFFFFFF.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32828</id>
 
-
    <name>scUserAgent</name>
 
-
    <status>current</status>
 
-
    <datatype>string64</datatype>
 
-
    <semantics>name</semantics>
 
-
    <description>
 
-
    The user agent field extracted from the HTTP transaction.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32829</id>
 
-
    <name>scHttpUrl</name>
 
-
    <status>current</status>
 
-
    <datatype>string64</datatype>
 
-
    <semantics>name</semantics>
 
-
    <description>
 
-
    The URL extracted from the HTTP transaction.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32830</id>
 
-
    <name>scSipDomain</name>
 
-
    <status>current</status>
 
-
    <datatype>string64</datatype>
 
-
    <semantics>name</semantics>
 
-
    <description>
 
-
    SIP: Domain name extracted from SIP header.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32831</id>
 
-
    <name>scSipUserAgent</name>
 
-
    <status>current</status>
 
-
    <datatype>string64</datatype>
 
-
    <semantics>name</semantics>
 
-
    <description>
 
-
    SIP: User-Agent field extracted from SIP header.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32832</id>
 
-
    <name>scFlowStart</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Flow start time.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32833</id>
 
-
    <name>scFlowType</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>flags</semantics>
 
-
    <description>
 
-
    0—All Skype flows
 
-
        1—Audio (SIP)
 
-
        2—Video (SIP)
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32834</id>
 
-
    <name>scSessionId</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    SIP: The flow-context ID of the control flow.
 
-
        Skype: The flow-context ID of the flow
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32835</id>
 
-
    <name>scUpstreamJitter</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    SIP: The average upstream jitter for the session,
 
-
        taken from the RTCP flow.
 
-
        N/A (0xFFFFFFFF) if RTCP flow is missing.
 
-
        Skype: N/A (0xFFFFFFFF).
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32836</id>
 
-
    <name>scDownstreamJitter</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    SIP: The average downstream jitter for the session,
 
-
        taken from the RTCP flow.
 
-
        N/A (0xFFFFFFFF) if RTCP flow is missing.
 
-
        Skype: N/A (0xFFFFFFFF).
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32837</id>
 
-
    <name>scUpstreamPayloadType</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    SIP: The upstream RTP payload type for the session.
 
-
        Skype: N/A (0xFF).
 
-
        A value of 0xFF indicates that this field was not available
 
-
        (no RTP flows were opened).
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32838</id>
 
-
    <name>scDownstreamPayloadType</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    SIP: The downstream RTP payload type for the session.
 
-
        Skype: N/A (0xFF).
 
-
        A value of 0xFF indicates that this field was not available
 
-
        (no RTP flows were opened).
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32839</id>
 
-
    <name>scUpstreamAverageJitter</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    The average upstream jitter for the session in units of 1/65.535 millisecond,
 
-
        taken from the RTCP flow.
 
-
        (Refer to the note following this table for an explanation of this value.) - [TBD]
 
-
        A value of 0xFFFFFFFF indicates that this field is undefined (no RTCP flows were opened).
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32840</id>
 
-
    <name>scDownstreamAverageJitter</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    The average downstream jitter for the session in units of 1/65.535 millisecond,
 
-
        taken from the RTCP flow.
 
-
        (Refer to the note following this table for an explanation of this value.) - [TBD]
 
-
        A value of 0xFFFFFFFF indicates that this field is undefined (no RTCP flows were opened).
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32841</id>
 
-
    <name>scCallDestination</name>
 
-
    <status>current</status>
 
-
    <datatype>string64</datatype>
 
-
    <semantics>name</semantics>
 
-
    <description>
 
-
    The Q931 Alias address of the session destination.
 
-
        A value of N/A indicates that this field was not found in the traffic.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32842</id>
 
-
    <name>scCallSource</name>
 
-
    <status>current</status>
 
-
    <datatype>string64</datatype>
 
-
    <semantics>name</semantics>
 
-
    <description>
 
-
    The Q931 Alias address of the session source.
 
-
        A value of N/A indicates that this field was not found in the traffic.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32843</id>
 
-
    <name>scCallType</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>flags</semantics>
 
-
    <description>
 
-
    The call type (taken from H225 packet).
 
-
        A value of 0xFF indicates that this field is undefined (no RTP flows were opened).
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32844</id>
 
-
    <name>scMediaChannels</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    The number of data flows that were opened during the session.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32845</id>
 
-
    <name>scBlockReason</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>flags</semantics>
 
-
    <description>
 
-
    Indicates the reason why this session was blocked.
 
-
        For possible values and their interpretation,
 
-
        see Block Reason (uint8), page 2-42 of the SCA BB Reference Guide.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32846</id>
 
-
    <name>scBlockRdrCount</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Total number of blocked flows reported so far
 
-
        (from the beginning of the current time frame).
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>32847</id>
 
-
    <name>scBlockRdrCount</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>flags</semantics>
 
-
    <description>
 
-
    Indicates whether the flow has been redirected after being blocked.
 
-
        0—Not redirected
 
-
        1—Redirected
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37000</id>
 
-
    <name>CNT_PKTS_DROP</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>
 
-
    Delta count of the number of dropped packets.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37001</id>
 
-
    <name>CNT_PKTS_DROP_PERM</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>
 
-
    Permanent count of the number of dropped packets.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37002</id>
 
-
    <name>CNT_PKTS_RATE</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>
 
-
    Packet rate for the flow.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37003</id>
 
-
    <name>CNT_BYTE_RATE</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>
 
-
    Measured rate.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37004</id>
 
-
    <name>MEDIA_CNT_BYTES</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>
 
-
    Media Stream Octect Count.
 
-
        Delta count of the number of bytes of media payload.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37005</id>
 
-
    <name>MEDIA_CNT_BYTES_PERM</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>
 
-
    Permanent count of the number of bytes of media payload.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37006</id>
 
-
    <name>MEDIA_BYTE_RATE</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Mean Media Bit Rate. Reported in bytes, not bits.
 
-
        Byte rate for the media stream.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37007</id>
 
-
    <name>MEDIA_CNT_PKTS</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>deltaCounter</semantics>
 
-
    <description>
 
-
    Media Stream Packet Count.
 
-
        Delta count of the number of packets with a media payload.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37008</id>
 
-
    <name>MEDIA_CNT_PKTS_PERM</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>
 
-
    Permanent count of the number of packets with a media payload.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37009</id>
 
-
    <name>MEDIA_PKTS_RATE</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>
 
-
    Media Packet Rate.
 
-
        Packet rate for the media stream.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37010</id>
 
-
    <name>MEDIA_PKTS_RATE_VAR</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>
 
-
    Media Rate Variation.
 
-
        Variation in packet rate from configured expected rate (Percent).
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37011</id>
 
-
    <name>MEDIA_EVENT</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>flags</semantics>
 
-
    <description>
 
-
    Flags indicating media errors:
 
-
* 0x01=Medias-stop. Media-Stop is set when there are no packets for the given flow in an interval.
 
-
* 0x02=Media-Error. Media-Error is set when one of the threshold is crossed for the flow     
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37012</id>
 
-
    <name>[TBD]</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>flags</semantics>
 
-
    <description>
 
-
    Flag indicating an error with the monitor.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37013</id>
 
-
    <name>monitorStartTime</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64 [TBD]</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Start time for monitoring interval.
 
-
        See 37057.
 
-
        It is UTC time since Jan 1, 1970 in secs/frac_secs.
 
-
        The format is secs in the topmost bits (32),
 
-
        and frac_secs in the least significant bits (32)
 
-
frac_secs is n/(2^32) of a second.
 
-
(Formerly TIMESTAMP_INTERVAL)       
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37014</id>
 
-
    <name>TRANS_PKTS_EXPECT</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>
 
-
    Packets Expected Count.
 
-
        Expected number of packets from sequencing information.
 
-
        Delta.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37015</id>
 
-
    <name>TRANS_PKTS_EXPECT_PERM</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>
 
-
    Expected number of packets from sequencing information.
 
-
        Perm.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37016</id>
 
-
    <name>TRANS_RTT</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    RTT calculation for flow.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37017</id>
 
-
    <name>TRANS_EVENT_PKT_LOST_CNT</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>
 
-
    See 37041 and 37042.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37018</id>
 
-
    <name>AVG_SEQ_DISC_LEN</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Average sequence discontinuity length within the monitoring interval.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37019</id>
 
-
    <name>TRANS_PKTS_LOST </name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>deltaCounter</semantics>
 
-
    <description>
 
-
    Delta count of the number of lost packets from sequencing information.
 
-
See 37043, 37044.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37020</id>
 
-
    <name>TRANS_PKTS_LOST_PERM</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>
 
-
    Permanent count of the number of lost packets from sequencing information.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37021</id>
 
-
    <name>TRANS_PKTS_LOST_RATE</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>
 
-
    Packet loss rate  from sequencing information.
 
-
        See 37046, 37047.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37022</id>
 
-
    <name>RTP_SSRC</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    RTP source identifier.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37023</id>
 
-
    <name>RTP_JITTER</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Mean jitter for the RTP stream.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37024</id>
 
-
    <name>RTP_JITTER_MIN</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Minimum jitter for the RTP stream.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37025</id>
 
-
    <name>RTP_JITTER_MAX</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Maximum jitter for the RTP stream.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37026</id>
 
-
    <name>counterFlow</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>
 
-
    Flow count.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37027</id>
 
-
    <name>MISC_UNSUPPORTED</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Used for exporting an unsupported fields options table.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37028</id>
 
-
    <name>CNT_BYTES_RATE_FLOW</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>
 
-
    Bytes per sec.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37029</id>
 
-
    <name>CNT_BYTES_RATE_FLOW_MIN</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>
 
-
    Min byte rate for the flow.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37030</id>
 
-
    <name>CNT_BYTES_RATE_FLOW_MAX</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>
 
-
    Max byte rate for the flow.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37031</id>
 
-
    <name>CNT_PKTS_RATE_FLOW</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>
 
-
    Packet rate in this interval.
 
-
Unit is packets per sec.
 
-
See 37031 and 37032.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37032</id>
 
-
    <name>CNT_PKTS_RATE_FLOW_MIN</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>
 
-
    Min packet rate for the flow.
 
-
        See 37030.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37033</id>
 
-
    <name>CNT_PKTS_RATE_FLOW_MAX</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>
 
-
    Max packet rate for the flow.
 
-
        See 37030.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37034</id>
 
-
    <name>applicationMediaBytesRatePerFlow</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>
 
-
    Bytes/sec.
 
-
        See 37034, 37035.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37035</id>
 
-
    <name>applicationMediaBytesRatePerFlowMin</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>
 
-
    Bytes/sec.
 
-
        See 37033.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37036</id>
 
-
    <name>applicationMediaBytesRatePerFlowMax</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>
 
-
    Bytes/sec.
 
-
        See 37033.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37037</id>
 
-
    <name>RTP_SEQ_CYCLE_COUNT</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Number of times the RTP sequence number cycled (wrapped) within the monitoring interval.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37038</id>
 
-
    <name>application media packets rate variation min</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Percent.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37039</id>
 
-
    <name>application media packets rate variation max</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Percent.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37040</id>
 
-
    <name>transport rtp flow count</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Number of RTP flows.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37041</id>
 
-
    <name>transport rtp payload type</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>flags</semantics>
 
-
    <description>
 
-
    RTP payload type (value is 0 – 255).
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37042</id>
 
-
    <name>transport packets lost counter min</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>
 
-
    See 37019.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37043</id>
 
-
    <name>transport packets lost counter max</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>
 
-
    See 37019.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37044</id>
 
-
    <name>transport event packet-loss counter min</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>
 
-
    See 37017.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37045</id>
 
-
    <name>transport event packet-loss counter max</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>
 
-
    See 37017.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37046</id>
 
-
    <name>RTP_SEQ_RESYNC_COUNT</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Number of times the RTP sequence number was resynched within the monitoring interval.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37047</id>
 
-
    <name>transport packets lost rate min</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    See 37045.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37048</id>
 
-
    <name>transport packets lost rate max</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    See 37045.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37049</id>
 
-
    <name>transport tcp flow count</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>
 
-
    tbd
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37050</id>
 
-
    <name>transport round-trip-time sum</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    tbd
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37051</id>
 
-
    <name>transport round-trip-time samples</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    tbd
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37052</id>
 
-
    <name>transport round-trip-time min</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    tbd
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37053</id>
 
-
    <name>transport round-trip-time max</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    tbd
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37054</id>
 
-
    <name>Global session ID</name>
 
-
    <status>current</status>
 
-
    <datatype>string24</datatype>
 
-
    <semantics>name</semantics>
 
-
    <description>
 
-
    Used by the video monitoring system to maintain tracking of a flow end to end.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37055</id>
 
-
    <name>Multi-party-session ID</name>
 
-
    <status>current</status>
 
-
    <datatype>string16</datatype>
 
-
    <semantics>name</semantics>
 
-
    <description>
 
-
    Used by the video monitoring system to track related flows of a media session end to end.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37056</id>
 
-
    <name>Clock frequency</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    clock frequency of the media encoder.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37057</id>
 
-
    <name>monitor end time</name>
 
-
    <status>deprecated</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Deprecated. Use 37092.
 
-
End time for monitoring interval.
 
-
See 37013 for details of the secs / frac_secs format.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37058</id>
 
-
    <name>Transport packets out-of-ordered counter</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    This field is incremented each time a out-of-ordered packet is
 
-
        received on the monitoring node. The out-of-order packet is
 
-
        determined based on sequence number in RTP packet.
 
-
        Although the counter will be incremented for RTP packets only
 
-
        but it logic could be applied to other transport.
 
-
Similar to ‘transport packets expected counter’. #37014.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37059</id>
 
-
    <name>SERVER_RESPONSE_TIME_AVG</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    The average server response time.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37060</id>
 
-
    <name>REFUSED_SESSION</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Total number of refused sessions.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37061</id>
 
-
    <name>CLIENT_NETWORK_DELAY_AVG</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    The average client network delay.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37062</id>
 
-
    <name>SERVER_NETWORK_DELAY_AVG</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    The average server network delay.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37063</id>
 
-
    <name>NETWORK_DELAY_AVG</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    The average network delay.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37064</id>
 
-
    <name>APPLICATION_DELAY_AVG</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    The average application delay.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37065</id>
 
-
    <name>SESSION_TIME_MIN</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    The minimum session time.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37066</id>
 
-
    <name>SESSION_TIME_MAX</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    The maximum session time.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37067</id>
 
-
    <name>SESSION_TIME_AVG</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    The average session time.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37068</id>
 
-
    <name>TRANSACTION_TIME_AVG</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    The average TCP transaction time.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37069</id>
 
-
    <name>CLOSED_SESSIONS</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Total number of closed sessions.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37070</id>
 
-
    <name>RETRANSMISSION</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Total number of retransmitted packets.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37071</id>
 
-
    <name>OUTOFORDER_BYTES</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Total number of out-of-order bytes.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37072</id>
 
-
    <name>CLIENT_THROUGHPUT_AVG</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    The average client throughput.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37073</id>
 
-
    <name>UNRESPONSIVE_SESSION</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Total number of unresponsive sessions.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37074</id>
 
-
    <name>OUTOFORDER_PACKETS</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Total number of out-of-order packets.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37075</id>
 
-
    <name>V4_SRC_OBSERVATION_NODE</name>
 
-
    <status>current</status>
 
-
    <datatype>ipv4Address</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    The IPv4 source address from which the observation starts.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37076</id>
 
-
    <name>V4_DST_OBSERVATION_NODE</name>
 
-
    <status>current</status>
 
-
    <datatype>ipv4Address</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    The IPv4 destination address to which the observation ends.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37077</id>
 
-
    <name>V6_SRC_OBSERVATION_NODE</name>
 
-
    <status>current</status>
 
-
    <datatype>ipv6Address</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    The IPv6 source address from which the observation starts.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37078</id>
 
-
    <name>V6_DST_OBSERVATION_NODE</name>
 
-
    <status>current</status>
 
-
    <datatype>ipv6Address</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    The IPv6 destination address to which the observation ends.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37079</id>
 
-
    <name>ONE_WAY_DELAY_SUM</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    The packet transmission delay sum between specified instances.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37080</id>
 
-
    <name>ONE_WAY_DELAY_SAMPLES</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Total number of one-way-delay samples which is to be used
 
-
        in conjunction with delay sum.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37081</id>
 
-
    <name>ONE_WAY_DELAY</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    The packet transmission delay between specified routers.
 
-
Unknown value is 0xFFFFFFFF.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37082</id>
 
-
    <name>PACKET_ARRIVAL_TIMESTAMP</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    The absolute timestamp of the arrival of the target packet.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37083</id>
 
-
    <name>TCP_WINDOW_SIZE_MIN</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    The minimum TCP window size.
 
-
To support window scale option in future, needed uint32, instead of uint16.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37084</id>
 
-
    <name>TCP_WINDOW_SIZE_MAX</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    The maximum TCP window size.
 
-
To support window scale option in future, needed uint32, instead of uint16.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37085</id>
 
-
    <name>TCP_WINDOW_SIZE_AVG</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    The average  TCP window size.
 
-
To support window scale option in future, needed uint32, instead of uint16.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37086</id>
 
-
    <name>TCP_MAXIMUM_SEGMENT_SIZE</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    The TCP maximum segment size.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37087</id>
 
-
    <name>RTP_INVALLID_SEQ_COUNT</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Number RTP packets received with an invalid sequence count within the monitoring interval.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37088</id>
 
-
    <name>LOW_UNAVAILABILITY_MILLISECONDS</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Number of milliseconds the flow was unavailable within the monitoring interval.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37089</id>
 
-
    <name>MID_PID</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    The MID (Media Delivery Index) PID (program identifier).
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37090</id>
 
-
    <name>METRIC_TYPE</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    The metric type of the flow
 
-
0 – Unknown
 
-
1 – IP CBR
 
-
2 – RTP
 
-
3 – RTP MMR (Microsoft Media Room)
 
-
4 – RTP J2K
 
-
5 – RTP Voice
 
-
6 – MDI
 
-
7 – MDI  RTP
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37091</id>
 
-
    <name>TCP_WINDOW_SIZE_SUM</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    The Sum of TCP window sizes of the flow over the life of the flow.
 
-
        This can be used in conjunction with IN_PKTS to calculate the average TCP window size.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37092</id>
 
-
    <name>TIME_INTERVAL_END</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    The absolute time in epoch format (secs and fractional secs)
 
-
        representing the end of the monitoring interval.
 
-
See 37013 for details of the secs / frac_secs format.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37093</id>
 
-
    <name>RTP_JITTER_MEAN_SUM</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    The sum of RTP jitter mean of all matching flows.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37094</id>
 
-
    <name>MEDIA_CNT_PKTS_RATE_VAR_SUM</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    The sum of media rate variation from the configured rate for the RTP stream.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37095</id>
 
-
    <name>TCP_WINDOW_SIZE_AVG_SUM</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Sum of the average window size across all packets across multiple flows.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>37500</id>
 
-
    <name>vqmMostRecentResolutionWidth</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>
 
-
    The most recently observed width of video frame. Range 1-8000, unit: pixels.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>38000</id>
 
-
    <name>vdsDisplayProtocol</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>
 
-
    Specifies the remote display protocol used:
 
-
0 RDP
 
-
1 PCoIP
 
-
2 ICA
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>39000</id>
 
-
    <name>IPV4_BR_ADDR</name>
 
-
    <status>current</status>
 
-
    <datatype>ipv4Address</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    IPv4 Border Router (BR) address.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>39001</id>
 
-
    <name>PFR_STATUS</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>flags</semantics>
 
-
    <description>
 
-
    state code (state_type: 1 Byte, state_subtype: 1 Byte).
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>39002</id>
 
-
    <name>REASON_ID</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>flags</semantics>
 
-
    <description>
 
-
    Reason ID.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>39003</id>
 
-
    <name>Threshold</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>flags</semantics>
 
-
    <description>
 
-
    Policy threshold to which PfR thinks In-Policy.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>39004</id>
 
-
    <name>Priority</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Policy priority settings..
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>39005</id>
 
-
    <name>shortTermRTT</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Average round-trip-time for short-term period.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>39006</id>
 
-
    <name>longTermRTT</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Average round-trip-time for long-term period.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>39007</id>
 
-
    <name>BelowMOSPercentage</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Average percentage value below the MOS threshold.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>39008</id>
 
-
    <name>RSVPBandWidthPool</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Bandwidth pool reserved by RSVP.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>39009</id>
 
-
    <name>RollupCounter</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Rollup counter which is expired when it becomes zero.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>39010</id>
 
-
    <name>BandWidthPercentage</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Bandwidth percentage against the maximum bandwidth.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>39011</id>
 
-
    <name>BandWidthFee</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Fee for a specific bandwidth.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>39012</id>
 
-
    <name>L4_SRC_PORT_MIN</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    TCP/UDP source minimum port number.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>39013</id>
 
-
    <name>L4_SRC_PORT_MAX</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    TCP/UDP source maximum port number.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>39014</id>
 
-
    <name>L4_DST_PORT_MIN</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    TCP/UDP destination minimum port number.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>39015</id>
 
-
    <name>L4_DST_PORT_MAX</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    TCP/UDP destination maximum port number.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>39016</id>
 
-
    <name>CAPACITY</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Link capacity – egress link capacity (kbps).
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>39017</id>
 
-
    <name>INGRESS_BW</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Current ingress bandwidth (kbps).
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>39018</id>
 
-
    <name>MAX_INGRESS_BW</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Max ingress bandwidth (kbps).
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>39019</id>
 
-
    <name>EGRESS_BW</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Current egress bandwidth (kbps).
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>39020</id>
 
-
    <name>MAX_EGRESS_BW</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Max egress bandwidth (kbps).
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>39021</id>
 
-
    <name>INGRESS_ROLLUP_BW</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Ingress rollup bandwidth (kbps).
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>39022</id>
 
-
    <name>EGRESS_ROLLUP_BW</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Egress rollup bandwidth (kbps).
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>39023</id>
 
-
    <name>KTH_ROLLUP_BW</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    tbd
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>39024</id>
 
-
    <name>LINK_GROUP_NAME</name>
 
-
    <status>current</status>
 
-
    <datatype>string</datatype>
 
-
    <semantics>name</semantics>
 
-
    <description>
 
-
    Link group name assigned to an external interface in the MC configuration.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>39025</id>
 
-
    <name>BGP_COMMUNITY</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>name</semantics>
 
-
    <description>
 
-
    Used for ingress load-balancing using BGP.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>39026</id>
 
-
    <name>BGP_PREPEND</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Number of BGP AS Path Prepend. Used for ingress load-balancing using BGP.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>39027</id>
 
-
    <name>ENTRANCE_DOWNGRADE</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Number of BGP AS Path Prepend. Used for ingress load-balancing using BGP.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>39028</id>
 
-
    <name>DISCARD_ROLLUP_COUNT</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Number of BGP AS Path Prepend. Used for ingress load-balancing using BGP.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>39029</id>
 
-
    <name>servicesPfrClassTagId</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    PfR Traffic-Class Tag ID
 
-
        (collect services pfr class-tag-id)
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>39030</id>
 
-
    <name>servicesPfrMcId</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    PfR  Master Controller (MC) identifier
 
-
        (collect services pfr mc-id)
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>40005</id>
 
-
    <name>translatedDstPort</name>
 
-
    <status>deprecated</status>
 
-
    <datatype>unsigned16</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
0 - No Event (Ignore Field)
 
-
1 - Session/Flow Created
 
-
2 - Session/Flow Denied
 
-
3 - Session/Flow Deleted
 
-
4 - Session/Flow Alert
 
-
(Used by MCP/SCE)
 
-
5 - Flow Update
 
-
(deprecated for IANA #233)
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42001</id>
 
-
    <name>namDataSrc</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    NAM assigned data source (port, NDE device, VLAN id, etc.),
 
-
        associated with NAM’s input ifIndex.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42002</id>
 
-
    <name>srcSite</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    NAM assigned source site (aggregation of source hosts)
 
-
        Site is a user–defined grouping of hosts (IP addresses)
 
-
        and (optionally) data-sources (logical channels of ingress traffic, i.e. observation points)
 
-
        according to one the following or similar supported definition methods, for example:
 
-
        - Network Prefix(es)
 
-
        - Network Prefix(es) + Set of Data Source(s)
 
-
        - Network Prefix(es) + Set of Data Source(s) + Set of VLAN(s)
 
-
        - WAAS data source
 
-
        - NDE/CEF data source + interface(s)
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42003</id>
 
-
    <name>dstSite</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    NAM assigned destination site (aggregation of destination hosts).
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42004</id>
 
-
    <name>serverSite</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    NAM assigned server site for IAP metrics (can be both traffic source and destination).
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42005</id>
 
-
    <name>clientSite</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    NAM assigned client site for IAP metrics (can be both traffic source and destination)
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42006</id>
 
-
    <name>Unused</name>
 
-
    <status>current</status>
 
-
    <datatype></datatype>
 
-
    <semantics></semantics>
 
-
    <description>
 
-
    tbd
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42007</id>
 
-
    <name>serverIPv4Address</name>
 
-
    <status>current</status>
 
-
    <datatype>ipv4Address</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    Server address (IPv4) in IAP metrics (can be both traffic source and destination).
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42008</id>
 
-
    <name>clientIPv4Address</name>
 
-
    <status>current</status>
 
-
    <datatype>ipv4Address</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    Client address (IPv4) in IAP metrics (can be both traffic source and destination).
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42009</id>
 
-
    <name>Unused</name>
 
-
    <status>current</status>
 
-
    <datatype></datatype>
 
-
    <semantics></semantics>
 
-
    <description>
 
-
    tbd
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42010</id>
 
-
    <name>netEncap</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>default</semantics>
 
-
    <description>
 
-
    Network protocol encapsulation enum.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42011</id>
 
-
    <name>serverIPv6Address</name>
 
-
    <status>current</status>
 
-
    <datatype>ipv6Address</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    Server address (IPv6) in IAP metrics (can be both traffic source and destination).
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42012</id>
 
-
    <name>clientIPv6Address</name>
 
-
    <status>current</status>
 
-
    <datatype>ipv6Address</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    Client address (IPv6) in IAP metrics (can be both traffic source and destination)
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42013</id>
 
-
    <name>namSrcDeviceId</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    Internal index of the (traffic) source device
 
-
NAM source device fields are keys in the exported flows.
 
-
NAM source device designate the network device sending the traffic to NAM.
 
-
NAM source device may or may not be a NetFlow observation point.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42014</id>
 
-
    <name>namSrcDeviceIPv4Address</name>
 
-
    <status>current</status>
 
-
    <datatype>ipv4Address</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    See above.       
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42015</id>
 
-
    <name>namSrcDeviceIPv6Address</name>
 
-
    <status>current</status>
 
-
    <datatype>ipv6Address</datatype>
 
-
    <semantics>identifier</semantics>
 
-
    <description>
 
-
    See above.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42016</id>
 
-
    <name>siteName</name>
 
-
    <status>current</status>
 
-
    <datatype>string</datatype>
 
-
    <semantics>name</semantics>
 
-
    <description>
 
-
    Site name.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42017</id>
 
-
    <name>siteDescription</name>
 
-
    <status>current</status>
 
-
    <datatype>string</datatype>
 
-
    <semantics>name</semantics>
 
-
    <description>
 
-
    Site description.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42018</id>
 
-
    <name>unused</name>
 
-
    <status>current</status>
 
-
    <datatype></datatype>
 
-
    <semantics></semantics>
 
-
    <description>
 
-
    tbd
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42019</id>
 
-
    <name>unused</name>
 
-
    <status>current</status>
 
-
    <datatype></datatype>
 
-
    <semantics></semantics>
 
-
    <description>
 
-
    tbd
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42020</id>
 
-
    <name>waasOptimizationSegment</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>default</semantics>
 
-
    <description>
 
-
    WAAS optimization "segment".
 
-
        (Client LAN, Client WAN, Server WAN, Server LAN, or Passthrough).
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42021</id>
 
-
    <name>waasPassThroughReason</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned8</datatype>
 
-
    <semantics>flags</semantics>
 
-
    <description>PT_NA: 0 - [PTR indicated by SN] PT_NO_PEER: 1, PT_RJCT_CAP: 2, PT_RJCT_RSRCS: 3, PT_RJCT_NO_LICENSE: 4, PT_APP_CONFIG: 5, PT_GLB_CONFIG: 6, PT_ASYMMETRIC: 7, PT_IN_PROGRESS: 8, PT_INTERMEDIATE: 9, PT_OVERLOAD: 10, PT_INT_ERROR: 11, PT_APP_OVERRIDE: 12, PT_SVR_BLACKLIST: 13, PT_AD_VER_MISMTCH: 14, PT_AD_AO_INCOMPAT: 15, PT_AD_AOIM_PROGRESS: 16, PT_DIRM_VER_MISMTCH: 17, PT_PEER_OVERRIDE: 18, PT_AD_OPT_PARSE_FAIL: 19, PT_AD_PT_SERIAL_MODE: 20, PT_SN_INTERCEPTION_ACL: 21, PT_IP_FRAG_UNSUPP_PEER: 22 - [PTR collected by SC globally] PT_CLUSTER_MEMBER: 32, PT_FLOW_QUERY_FAIL: 33, PT_FLOWSW_INT_ACL_DENY: 34 - [PTR collected by SC per class] PT_UNKNOWN: 40, PT_FLOWSW_PLCY: 41, PT_SNG_OVERLOAD: 42, PT_CLUSTER_DEGRADE: 43, PT_FLOW_LEARN_FAIL: 44 - [PTR specific to Lhotse] PT_ZBFW: 56, PT_RTSP_ALG: 57, PT_NON_WAN: 58, PT_NAT_ALG: 59 </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42022</id>
 
-
    <name>unused</name>
 
-
    <status>current</status>
 
-
    <datatype></datatype>
 
-
    <semantics></semantics>
 
-
    <description>
 
-
    tbd
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42023</id>
 
-
    <name>unused</name>
 
-
    <status>current</status>
 
-
    <datatype></datatype>
 
-
    <semantics></semantics>
 
-
    <description>
 
-
    tbd
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42024</id>
 
-
    <name>unused</name>
 
-
    <status>current</status>
 
-
    <datatype></datatype>
 
-
    <semantics></semantics>
 
-
    <description>
 
-
    tbd
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42025</id>
 
-
    <name>unused</name>
 
-
    <status>current</status>
 
-
    <datatype></datatype>
 
-
    <semantics></semantics>
 
-
    <description>
 
-
    tbd
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42026</id>
 
-
    <name>unused</name>
 
-
    <status>current</status>
 
-
    <datatype></datatype>
 
-
    <semantics></semantics>
 
-
    <description>
 
-
    tbd
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42027</id>
 
-
    <name>unused</name>
 
-
    <status>current</status>
 
-
    <datatype></datatype>
 
-
    <semantics></semantics>
 
-
    <description>
 
-
    tbd
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42028</id>
 
-
    <name>unused</name>
 
-
    <status>current</status>
 
-
    <datatype></datatype>
 
-
    <semantics></semantics>
 
-
    <description>
 
-
    tbd
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42029</id>
 
-
    <name>unused</name>
 
-
    <status>current</status>
 
-
    <datatype></datatype>
 
-
    <semantics></semantics>
 
-
    <description>
 
-
    tbd
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42030</id>
 
-
    <name>unused</name>
 
-
    <status>current</status>
 
-
    <datatype></datatype>
 
-
    <semantics></semantics>
 
-
    <description>
 
-
    tbd
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42031</id>
 
-
    <name>unused</name>
 
-
    <status>current</status>
 
-
    <datatype></datatype>
 
-
    <semantics></semantics>
 
-
    <description>
 
-
    tbd
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42032</id>
 
-
    <name>unused</name>
 
-
    <status>current</status>
 
-
    <datatype></datatype>
 
-
    <semantics></semantics>
 
-
    <description>
 
-
    tbd
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42033</id>
 
-
    <name>initiatorPackets</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>
 
-
    Total packets sent by clients.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42034</id>
 
-
    <name>responderPackets</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned64</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>
 
-
    Total packets sent by servers.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42035</id>
 
-
    <name>retransOctets</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>deltaCounter</semantics>
 
-
    <description>
 
-
    Total octets retransmitted.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42036</id>
 
-
    <name>retransPackets</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>deltaCounter</semantics>
 
-
    <description>
 
-
    Total IP packets retransmitted by Layer 4 (TCP/SCTP) or application.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42037</id>
 
-
    <name>unused</name>
 
-
    <status>current</status>
 
-
    <datatype></datatype>
 
-
    <semantics></semantics>
 
-
    <description>
 
-
    tbd
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42038</id>
 
-
    <name>unused</name>
 
-
    <status>current</status>
 
-
    <datatype></datatype>
 
-
    <semantics></semantics>
 
-
    <description>
 
-
    tbd
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42039</id>
 
-
    <name>unused</name>
 
-
    <status>current</status>
 
-
    <datatype></datatype>
 
-
    <semantics></semantics>
 
-
    <description>
 
-
    tbd
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42040</id>
 
-
    <name>transactionCountDelta</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>deltaCounter</semantics>
 
-
    <description>
 
-
    Number of transactions
 
-
        Transaction is defined as a pair of an application-layer request
 
-
        from client and the associated response from server. 
 
-
        Each request/response consists of one or multiple packets carrying application data.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42041</id>
 
-
    <name>sumTransactionTime</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>totalCounter</semantics>
 
-
    <description>
 
-
    Sum of transaction time.
 
-
Divide by transactionCountDelta for AVG.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42042</id>
 
-
    <name>maxTransactionTime</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Maximal transaction time in msec.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42043</id>
 
-
    <name>minTransactionTime</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Minimal transaction time in msec.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42044</id>
 
-
    <name>sumDataTransmissionTime</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Sum of data transmission time in msec.
 
-
        Transmission is defined as the data transmission of the server response in a transaction.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42045</id>
 
-
    <name>sumDataRetransmissionTime</name>
 
-
    <status>current</status>
 
-
    <datatype>unsigned32</datatype>
 
-
    <semantics>quantity</semantics>
 
-
    <description>
 
-
    Sum of data retransmission time in msec.
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42046</id>
 
-
    <name>unused</name>
 
-
    <status>current</status>
 
-
    <datatype></datatype>
 
-
    <semantics></semantics>
 
-
    <description>
 
-
    tbd
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42047</id>
 
-
    <name>unused</name>
 
-
    <status>current</status>
 
-
    <datatype></datatype>
 
-
    <semantics></semantics>
 
-
    <description>
 
-
    tbd
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42048</id>
 
-
    <name>unused</name>
 
-
    <status>current</status>
 
-
    <datatype></datatype>
 
-
    <semantics></semantics>
 
-
    <description>
 
-
    tbd
 
-
    </description>
 
-
  </field>
 
-
  <field>
 
-
    <id>42049</id>
 
-
    <name>unused</name>
 
-
    <status>current</status>
 
-
    <datatype></datatype>
 
-
    <semantics></semantics>
 
-
    <description>
 
-