Skip to main content
Version: 2.10.1

Flow Capture and Replay Data (21001 / 31001 / 21800 / 21900)

These messages enable you to look back in time for security issues and forensic investigations. In Replay mode NFO sends all underlying flow records in Original Flow Data format with nfc_id as follows:

Flow Record TypeOriginal Flow Data nfc_idReplay Data nfc_id
NetFlow v5/v9/IPFIX data recordsnfc_id=20001nfc_id=21001
NetFlow v5/v9/IPFIX options recordsnfc_id=30001nfc_id=31001
sFlow counter recordsnfc_id=20800nfc_id=21800
sFlow data recordsnfc_id=20900nfc_id=21900