Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 

Log Dictionary for Template Types

 

Table 1 shows the logging dictionary of the template types that LRF supports. The log fields are a mix of IETF standard fields and fields that Juniper Networks defined. The IPFIX convention for vendor-defined fields is an enterprise bit set to 1 and an enterprise ID set to the vendor-ID (the Juniper Networks vendor-ID is 2636). An IETF standard field has an enterprise bit set to 0 and no value for the enterprise ID.

Table 1: Logging Dictionary for Template Types

Template Type

Field Name

Enterprise Bit/ID

Information Element Identifier

Data Type

Data Length

(bytes)

Device Data

DPI Engine Version

1/2636

503

string

32

IP address of SCG/BNG

1/2636

502

ipv4Address

4

DNS

DNS response time

1/2636

876

dateTimeMilliseconds

8

Flow ID

Flow ID

1/2636

107

unsigned32

4

HTTP

User Agent

1/2636

152

string

32

Content Length - Request

1/2636

154

unsigned32

4

HTTP Response Code

1/2636

155

unsigned16

2

Language

1/2636

156

string

16

Host

1/2636

157

string

64

Location

1/2636

158

string

64

Http Method

1/2636

159

string

8

Referer(HTTP)

1/2636

160

string

64

MIME type

1/2636

161

string

32

Http URI

1/2636

163

string

255

Time to First Byte

1/2636

181

dateTimeMilliseconds

8

IFL Subscriber

Subscriber Name

1/2636

511

string

16

IFL Name

1/2636

512

string

16

IPFlow

Uplink Octets

1/2636

103

unsigned32

4

Downlink Octets

1/2636

104

unsigned32

4

Uplink Packets

1/2636

105

unsigned32

4

Downlink Packets

1/2636

106

unsigned32

4

Ip Protocol

0

4

unsigned8

1

Record Reason

1/2636

112

unsigned8

1

IPFlow Extended

Service-Set-Name

1/2636

520

string

16

Routing-Instance

1/2636

521

string

16

IPFlow TCP Timestamp

Retransmitted TCP packets uplink

1/2636

115

unsigned32

4

Retransmitted TCP packets downlink

1/2636

116

unsigned32

4

Smooth RTT uplink

1/2636

117

dateTimeMilliseconds

8

Smooth RTT downlink

1/2636

118

dateTimeMilliseconds

8

Client setup Time

1/2636

119

dateTimeMilliseconds

8

Server Setup time

1/2636

120

dateTimeMilliseconds

8

TCP flow creation timestamp

1/2636

121

dateTimeMilliseconds

8

First Client Payload TS

1/2636

108

dateTimeMilliseconds

8

Upload time

1/2636

113

dateTimeMilliseconds

8

First Server Payload TS

1/2636

110

dateTimeMilliseconds

8

Download time

1/2636

114

dateTimeMilliseconds

8

Acknowledged volumes uplink

1/2636

122

unsigned64

8

Acknowledged volumes downlink

1/2636

123

unsigned64

8

IPFlow Timestamp

Flow Start Time

1/2636

101

dateTimeMilliseconds

8

Flow End Time

1/2636

102

dateTimeMilliseconds

8

IPv4

Source IPv4 Address

0

8

ipv4Address

4

Destination IPv4 Address

0

12

ipv4Address

4

IPv4 Extended

IPv4 TOS/Class of Service

0

5

unsigned8

1

IPv4 Source Mask

0

9

unsigned8

1

IPv4 Destination Mask

0

13

unsigned8

1

IPv4 Next Hop

0

15

ipv4Address

4

IPv6

Source IPv6 Address

0

27

ipv6Address

16

Destination IPv6 Address

0

28

ipv6Address

16

IPv6 Extended

IPv6 Source Mask

0

29

unsigned8

1

IPv6 Destination Mask

0

30

unsigned8

1

IPv6 Next hop

0

62

ipv6Address

16

Traffic Class

1/2636

126

unsigned8

1

L7 Application

Application Protocol

1/2636

151

string

32

Application Name

1/2636

170

string

32

Host

1/2636

157

string

64

Mobile Subscriber

IMSI

1/2636

504

string

16

MSISDN

1/2636

505

string

16

IMEI

1/2636

506

string

16

RAT-type

1/2636

507

unsigned8

1

ULI

1/2636

508

string

13

RADIUS Called Station ID

1/2636

509

string

32

PCC

PCC rule name

1/2636

901

string

64

Status Code Distribution

Status code 1

1/2636

171

unsigned16

2

Status code 2

1/2636

172

unsigned16

2

Status code 3

1/2636

173

unsigned16

2

Status code 4

1/2636

174

unsigned16

2

Status code 5

1/2636

175

unsigned16

2

Num Instances 1

1/2636

176

unsigned16

2

Num Instances 2

1/2636

177

unsigned16

2

Num Instances 3

1/2636

178

unsigned16

2

Num Instances 4

1/2636

179

unsigned16

2

Num Instances 5

1/2636

180

unsigned16

2

Subscriber Data

NAS_IP_ADDR

1/2636

519

ipv4Address

4

Subscriber Type

1/2636

515

unsigned8

1

Subscriber IP address

1/2636

516

ipv4Address

4

Subscriber VRF

1/2636

517

unsigned32

4

NAS Port ID

1/2636

518

string

32

Accounting-Session-Id

1/2636

514

string

32

Class

1/2636

522

String

32

NAS Port Type

1/2636

523

unsigned32

4

RADIUS Calling Station ID

1/2636

524

String

16

Transport Layer

Source Transport Port

0

7

unsigned16

2

Destination Transport Port

0

11

unsigned16

2

Video

Bitrate

1/2636

851

unsigned32

2

Duration

1/2636

852

unsigned32

4

Wireline Subscriber

UserName

1/2636

513

string

32