Log Dictionary for Template Types
Table 1 shows the logging dictionary
of the template types that LRF supports. The log fields are a mix
of IETF standard fields and fields that Juniper Networks defined.
The IPFIX convention for vendor-defined fields is an enterprise bit
set to 1
and an enterprise ID set to the
vendor-ID. (The Juniper Networks vendor-ID is 2636.) An IETF standard
field has an enterprise bit set to 0
and
no value for the enterprise ID.
If you have enabled Next Gen Services with the MX-SPC3 services card, then the DNS, IPv4 extended, IPv6 extended, mobile subscriber, video, and wireline subscriber templates are not supported.
Template Type |
Field Name |
Enterprise Bit/ID |
Information Element Identifier |
Data Type |
Data Length(bytes) |
---|---|---|---|---|---|
Device Data |
DPI Engine Version |
1/2636 |
503 |
string |
32 |
IP address of TDF gateway. |
1/2636 |
502 |
ipv4Address |
4 |
|
DNS (Not available if Next Gen Services with the MX-SPC3 services card are enabled) |
DNS response time |
1/2636 |
876 |
dateTimeMilliseconds |
8 |
Flow ID |
Flow ID |
1/2636 |
107 |
unsigned32 |
4 |
HTTP |
User Agent |
1/2636 |
152 |
string |
32 |
Content Length - Request |
1/2636 |
154 |
unsigned32 |
4 |
|
HTTP Response Code |
1/2636 |
155 |
unsigned16 |
2 |
|
Language |
1/2636 |
156 |
string |
16 |
|
Host |
1/2636 |
157 |
string |
64 |
|
Location |
1/2636 |
158 |
string |
64 |
|
Http Method |
1/2636 |
159 |
string |
8 |
|
Referer(HTTP) |
1/2636 |
160 |
string |
64 |
|
MIME type |
1/2636 |
161 |
string |
32 |
|
Http URI |
1/2636 |
163 |
string |
255 |
|
Time to First Byte |
1/2636 |
181 |
dateTimeMilliseconds |
8 |
|
IFL Subscriber |
Subscriber Name |
1/2636 |
511 |
string Not applicable for BNG subscribers, hence this value is not be honored (is filled with zero). |
16 |
IFL Name |
1/2636 |
512 |
string Filled with default IFL name (filled with values Next Gen Services IFL) |
16 |
|
IPFlow |
Uplink Octets |
1/2636 |
103 |
unsigned32 |
4 |
Downlink Octets |
1/2636 |
104 |
unsigned32 |
4 |
|
Uplink Packets |
1/2636 |
105 |
unsigned32 |
4 |
|
Downlink Packets |
1/2636 |
106 |
unsigned32 |
4 |
|
Ip Protocol |
0 |
4 |
unsigned8 |
1 |
|
Record Reason |
1/2636 |
112 |
unsigned8 |
1 |
|
IPFlow Extended |
Service-Set-Name |
1/2636 |
520 |
string Contains data
fields for the Filled with
active |
16 |
Routing-Instance |
1/2636 |
521 |
string Not applicable for BNG subscribers, hence this value is not be honored (is filled with zero). |
16 |
|
IPFlow TCP Timestamp |
Retransmitted TCP packets uplink |
1/2636 |
115 |
unsigned32 |
4 |
Retransmitted TCP packets downlink |
1/2636 |
116 |
unsigned32 |
4 |
|
Smooth RTT uplink |
1/2636 |
117 |
dateTimeMilliseconds |
8 |
|
Smooth RTT downlink |
1/2636 |
118 |
dateTimeMilliseconds |
8 |
|
Client setup Time |
1/2636 |
119 |
dateTimeMilliseconds |
8 |
|
Server Setup time |
1/2636 |
120 |
dateTimeMilliseconds |
8 |
|
TCP flow creation timestamp |
1/2636 |
121 |
dateTimeMilliseconds |
8 |
|
First Client Payload TS |
1/2636 |
108 |
dateTimeMilliseconds |
8 |
|
Upload time |
1/2636 |
113 |
dateTimeMilliseconds |
8 |
|
First Server Payload TS |
1/2636 |
110 |
dateTimeMilliseconds |
8 |
|
Download time |
1/2636 |
114 |
dateTimeMilliseconds |
8 |
|
Acknowledged volumes uplink |
1/2636 |
122 |
unsigned64 |
8 |
|
Acknowledged volumes downlink |
1/2636 |
123 |
unsigned64 |
8 |
|
IPFlow Timestamp |
Flow Start Time |
1/2636 |
101 |
dateTimeMilliseconds |
8 |
Flow End Time |
1/2636 |
102 |
dateTimeMilliseconds |
8 |
|
IPv4 |
Source IPv4 Address |
0 |
8 |
ipv4Address |
4 |
Destination IPv4 Address |
0 |
12 |
ipv4Address |
4 |
|
IPv4 Extended (Not available if Next Gen Services with the MX-SPC3 services card are enabled) |
IPv4 TOS/Class of Service |
0 |
5 |
unsigned8 |
1 |
IPv4 Source Mask |
0 |
9 |
unsigned8 |
1 |
|
IPv4 Destination Mask |
0 |
13 |
unsigned8 |
1 |
|
IPv4 Next Hop |
0 |
15 |
ipv4Address |
4 |
|
IPv6 |
Source IPv6 Address |
0 |
27 |
ipv6Address |
16 |
Destination IPv6 Address |
0 |
28 |
ipv6Address |
16 |
|
IPv6 Extended (Not available if Next Gen Services are enabled on the MX-SPC3 services card) |
IPv6 Source Mask |
0 |
29 |
unsigned8 |
1 |
IPv6 Destination Mask |
0 |
30 |
unsigned8 |
1 |
|
IPv6 Next hop |
0 |
62 |
ipv6Address |
16 |
|
Traffic Class |
1/2636 |
126 |
unsigned8 |
1 |
|
L7 Application |
Application Protocol |
1/2636 |
151 |
string |
32 |
Application Name |
1/2636 |
170 |
string |
32 |
|
Host |
1/2636 |
157 |
string |
64 |
|
Mobile Subscriber (Not available if Next Gen Services are enabled on the MX-SPC3 services card) |
IMSI |
1/2636 |
504 |
string |
16 |
MSISDN |
1/2636 |
505 |
string |
16 |
|
IMEI |
1/2636 |
506 |
string |
16 |
|
RAT-type |
1/2636 |
507 |
unsigned8 |
1 |
|
ULI |
1/2636 |
508 |
string |
13 |
|
RADIUS Called Station ID |
1/2636 |
509 |
string |
32 |
|
PCC |
PCC rule name |
1/2636 |
901 |
string Not applicable if Next Gen Services are enabled. |
64 |
Status Code Distribution |
Status code 1 |
1/2636 |
171 |
unsigned16 |
2 |
Status code 2 |
1/2636 |
172 |
unsigned16 |
2 |
|
Status code 3 |
1/2636 |
173 |
unsigned16 |
2 |
|
Status code 4 |
1/2636 |
174 |
unsigned16 |
2 |
|
Status code 5 |
1/2636 |
175 |
unsigned16 |
2 |
|
Num Instances 1 |
1/2636 |
176 |
unsigned16 |
2 |
|
Num Instances 2 |
1/2636 |
177 |
unsigned16 |
2 |
|
Num Instances 3 |
1/2636 |
178 |
unsigned16 |
2 |
|
Num Instances 4 |
1/2636 |
179 |
unsigned16 |
2 |
|
Num Instances 5 |
1/2636 |
180 |
unsigned16 |
2 |
|
Subscriber Data |
NAS_IP_ADDR |
1/2636 |
519 |
ipv4Address Not applicable for BNG subscribers, hence this value is not be honored (is filled with zero). |
4 |
Subscriber Type |
1/2636 |
515 |
unsigned8 1 for IP-based subscriber, 2 for IFL-based subscriber |
1 |
|
Subscriber IP address |
1/2636 |
516 |
ipv4Address |
4 |
|
Subscriber VRF |
1/2636 |
517 |
unsigned32 Not applicable for BNG subscribers, hence this value is not be honored (is filled with zero). |
4 |
|
NAS Port ID |
1/2636 |
518 |
string Not applicable for BNG subscribers, hence this value is not be honored (is filled with zero). |
32 |
|
Accounting-Session-Id |
1/2636 |
514 |
string Not applicable for BNG subscribers, hence this value is not be honored (is filled with zero). |
32 |
|
Class |
1/2636 |
522 |
String Not applicable for BNG subscribers, hence this value is not be honored (is filled with zero). |
32 |
|
NAS Port Type |
1/2636 |
523 |
unsigned32 Not applicable for BNG subscribers, hence this value is not be honored (is filled with zero). |
4 |
|
Transport Layer |
Source Transport Port |
0 |
7 |
unsigned16 |
2 |
Destination Transport Port |
0 |
11 |
unsigned16 |
2 |
|
Video (Not available if Next Gen Services are enabled on the MX-SPC3 services card) |
Bitrate |
1/2636 |
851 |
unsigned32 |
2 |
Duration |
1/2636 |
852 |
unsigned32 |
4 |
|
Wireline Subscriber (Not available if Next Gen Services are enabled on the MX-SPC3 services card) |
UserName |
1/2636 |
513 |
string |
32 |