Appendix 1 – Required Flow Fields

Information Element (IE)

IE id

IE size, B

Description

sourceIPv4Address

8

4

The IPv4 source address in the IP packet header

destinationIPv4Address

12

4

The IPv4 destination address in the IP packet header

sourceTransportPort

7

2

The source port identifier in the transport header. For the transport protocols UDP, TCP, and SCTP, this is the source port number given in the respective header.

destinationTransportPort

11

2

The destination port identifier in the transport header. For the transport protocols UDP, TCP, and SCTP, this is the destination port number given in the respective header.

protocolIdentifier

4

1

The value of the protocol number in the IP packet header. The protocol number identifies the IP packet payload type. Protocol numbers are defined in the IANA Protocol Numbers registry.

ingressInterface

10

2 or 4

The index of the IP interface where packets of this Flow are being received. The value matches the value of managed object 'ifIndex' as defined in [RFC2863].

egressInterface

14

2 or 4

The index of the IP interface where packets of this Flow are being sent. The value matches the value of managed object 'ifIndex' as defined in [RFC2863].

octetDeltaCount or

octetTotalCount or (initiatorOctets and responderOctets)

1 or 85 or (231 and 232)

4 or 8

The number of octets since the previous report (if any) in incoming packets for this Flow at the Observation Point. The number of octets includes IP header(s) and IP payload.

packetDeltaCount or

octetTotalCount or (initiatorOctets and responderOctets)

2 or 85 or (231 and 232)

4 or 8

The number of incoming packets since the previous report (if any) for this Flow at the Observation Point. Or the number of Cisco ASA octets since the previous report (if any) in incoming packets. Then the number of packets for this Flow will be calculated.