Flow Monitoring Version 8 Format Output Fields

A detailed explanation of version 8 packet formats and fields is shown as follows:

Figure 1
Table 1
Figure 2
Table 2
Figure 3
Table 3
Figure 4
Table 4
Figure 5
Table 5
Figure 6
Table 6

Figure 1: Version 8 Template Flow Format Diagram of a packet format for network flow monitoring, showing fields like Version, Count, sysUptime, UNIX time, Flow Sequence, and Engine details.

Diagram of a packet format for network flow monitoring, showing fields like Version, Count, sysUptime, UNIX time, Flow Sequence, and Engine details.

Table 1: Version 8 Flow Template Fields
Field	Description
Version	8
Count	The number of records in the protocol data unit (PDU) or packet
sysUptime	Current time elapsed, in milliseconds, since the router started
UNIX seconds	Current seconds since 0000 UTC 1970
UNIX nanoseconds	Residual nanoseconds since 0000 UTC 1970
Flow sequence number	Sequence counter of total flows received
Engine type	Type of flow switching engine
Engine ID	ID number of the flow switching engine
Aggregation method	Aggregation method used
Aggregation version	Version of the aggregation export
Reserved	Empty field reserved for future usage

Figure 2: Version 8 AS Aggregation Flow Entry Format Data structure for network flow analysis showing fields: Flows, Packets, Bytes, Start Time, End Time, Source AS, Destination AS, Input Interface, Output Interface.

Data structure for network flow analysis showing fields: Flows, Packets, Bytes, Start Time, End Time, Source AS, Destination AS, Input Interface, Output Interface.

Table 2: Version 8 AS Aggregation Flow Entry Fields
Field	Description
Flows	Total number of flows
Packets	Total number of packets received in a flow
Bytes	Total number of bytes received in a flow
Start time of flow	System up time, in seconds, at the start of the flow
End time of flow	System up time, in seconds, at the end of the flow
Source AS	AS number of the source address
Destination AS	AS number of the destination address
Input interface	SNMP index value for the input interface where the router receives flows
Output interface	SNMP index value for the output interface where the router forwards flows

Figure 3: Version 8 Protocol/Port Aggregation Flow Entry Format Data structure for network flow analysis with fields: Flows, Packets, Bytes, Start Time, End Time, IP Protocol, Padding, Reserved, Source Port, Destination Port.

Data structure for network flow analysis with fields: Flows, Packets, Bytes, Start Time, End Time, IP Protocol, Padding, Reserved, Source Port, Destination Port.

Table 3: Version 8 Protocol/Port Aggregation Flow Entry Fields
Field	Description
Flows	Total number of flows
Packets	Total number of packets received in a flow
Bytes	Total number of bytes received in a flow
Start time of flow	System up time, in seconds, at the start of the flow
End time of flow	System up time, in seconds, at the end of the flow
IP protocol	IP protocol number
Padding	Bytes available to ensure a minimum packet length
Reserved	Empty field reserved for future usage
Source port	Source application port
Destination port	Destination application port

Figure 4: Version 8 Prefix Aggregation Flow Entry Format Data structure for network flow analysis showing fields like flows, packets, bytes, and timestamps for monitoring purposes.

Data structure for network flow analysis showing fields like flows, packets, bytes, and timestamps for monitoring purposes.

Table 4: Version 8 Prefix Aggregation Flow Entry Fields
Field	Description
Flows	Total number of flows
Packets	Total number of packets received in a flow
Bytes	Total number of bytes received in a flow
Start time of flow	System up time, in seconds, at the start of the flow
End time of flow	System up time, in seconds, at the end of the flow
Source prefix	Source IP address prefix
Destination prefix	Destination IP address prefix
Source mask length	Source address network mask length
Dest. mask length	Destination address network mask length
Reserved	Empty field reserved for future usage
Source AS	AS number of the source address
Destination AS	AS number of the destination address
Input interface	SNMP index value for the input interface where the router receives flows
Output interface	SNMP index value for the output interface where the router forwards flows

Figure 5: Version 8 Source Prefix Aggregation Flow Entry Format Data structure for network flow analysis showing fields like Flows, Packets, Bytes, Start Time, End Time, Source Prefix, Source Mask Length, Padding, Source AS, Input Interface, Reserved.

Data structure for network flow analysis showing fields like Flows, Packets, Bytes, Start Time, End Time, Source Prefix, Source Mask Length, Padding, Source AS, Input Interface, Reserved.

Table 5: Version 8 Source Prefix Aggregation Flow Entry Fields
Field	Description
Flows	Total number of flows
Packets	Total number of packets received in a flow
Bytes	Total number of bytes received in a flow
Start time of flow	System up time, in seconds, at the start of the flow
End time of flow	System up time, in seconds, at the end of the flow
Source prefix	Source IP address prefix
Source mask length	Source address network mask length
Padding	Bytes available to ensure a minimum packet length
Source AS	AS number of the source address
Input interface	SNMP index value for the input interface where the router receives flows
Reserved	Empty field reserved for future usage

Figure 6: Version 8 Destination Prefix Aggregation Flow Entry Format Data structure showing network flow analysis fields: Flows, Packets, Bytes, Start and End Time, Destination Prefix, Mask Length, Padding, Destination AS, Output Interface, Reserved.

Data structure showing network flow analysis fields: Flows, Packets, Bytes, Start and End Time, Destination Prefix, Mask Length, Padding, Destination AS, Output Interface, Reserved.

Table 6: Version 8 Destination Prefix Aggregation Flow Entry Fields
Field	Description
Flows	Total number of flows
Packets	Total number of packets received in a flow
Bytes	Total number of bytes received in a flow
Start time of flow	System up time, in seconds, at the start of the flow
End time of flow	System up time, in seconds, at the end of the flow
Destination prefix	Destination IP address prefix
Dest. mask length	Destination address network mask length
Padding	Bytes available to ensure a minimum packet length
Destination AS	AS number of the destination address
Output interface	SNMP index value for the output interface where the router forwards flows
Reserved	Empty field reserved for future usage

For more information about version 5 and version 8 packet formats and fields, see http://www.caida.org.