IPFIX - Other Vendors
- Last Updated: May 27, 2026
- 5 minute read
- Flowmon Products
- Flowmon
- Documentation
The Flowmon Collector supports IPFIX flow data from the following vendors:
-
Cisco, PEN = 9.
-
VMware, PEN = 6876.
-
Gigamon, PEN = 26866.
-
IXIA, PEN = 3054.
-
Nokia (ALU), PEN = 637.
Not all IPFIX fields from other vendors are supported. See the table below for a list of supported IPFIX fields.
Note: None of the following fields are applicable to the Flowmon Probe, they can only be collected by the Flowmon Collector.
| PEN | ID | Field | Description | Input Length (bytes) | Probe Configuration |
|---|---|---|---|---|---|
| 9 | 9268 | art-client-retransmission (IPFIX_CISCO_ART_CLIENT_RETRANSMISSIONS) | ART (Application Response Time) Count Retransmissions metric is the packet count for all the retransmitted client packets | 4 | Enabled by AVC Metrics |
| 9 | 9270 | art-server-retransmission (IPFIX_CISCO_ART_SERVER_RETRANSMISSIONS) | ART Count Retransmissions metric is the packet count for all the retransmitted client packets. | 4 | Enabled by AVC Metrics |
| 9 | 9292 | art-cnt-responses (IPFIX_CISCO_ART_CNT_RESPONSES) | Number of Req-Rsp pairs received within the monitoring interval. | 4 | Enabled by AVC Metrics |
| 9 | 9293 | art-hist1 (IPFIX_CISCO_ART_RES_HIST_1) | Number of responses by response time in 7-bucket histogram. Bucket 1, response time < 2 milliseconds. | 4 | Enabled by AVC Histogram |
| 9 | 9294 | art-hist2 (IPFIX_CISCO_ART_RES_HIST_2) | Number of responses by response time in 7-bucket histogram. Bucket 2, response time is between 2-5 milliseconds. | 4 | Enabled by AVC Histogram |
| 9 | 9295 | art-hist3 (IPFIX_CISCO_ART_RES_HIST_3) | Number of responses by response time in 7-bucket histogram. Bucket 3, response time is between 5-10 milliseconds. | 4 | Enabled by AVC Histogram |
| 9 | 9296 | art-hist4 (IPFIX_CISCO_ART_RES_HIST_4) | Number of responses by response time in 7-bucket histogram. Bucket 4, response time is between 10-50 milliseconds. | 4 | Enabled by AVC Histogram |
| 9 | 9297 | art-hist5 (IPFIX_CISCO_ART_RES_HIST_5) | Number of responses by response time in 7-bucket histogram. Bucket 5, response time is between 50-100 milliseconds. | 4 | Enabled by AVC Histogram |
| 9 | 9298 | art-hist6 (IPFIX_CISCO_ART_RES_HIST_6) | Number of responses by response time in 7-bucket histogram. Bucket 6, response time is between 100-500 milliseconds. | 4 | Enabled by AVC Histogram |
| 9 | 9299 | art-hist7 (IPFIX_CISCO_ART_RES_HIST_7) | Number of responses by response time in 7-bucket histogram. Bucket 7, response time is between 500 - 1000 milliseconds. | 4 | Enabled by AVC Histogram |
| 9 | 9300 | art-late (IPFIX_CISCO_ART_RES_LATE) | Number of responses received after the max Response Time. Current threshold of timeout is 1 second. Also referred to as Number of Late Responses (timeouts). | 4 | Enabled by AVC Histogram |
| 9 | 9306 | art-srt (IPFIX_CISCO_ART_SRT_SUM) | The time taken by an application to respond to a request. It is also referred to as Application Delay (AD) or Application Response Time. | 4 | Enabled by AVC Metrics |
| 9 | 9307 | art-srt-max (IPFIX_CISCO_ART_SRT_MAX) | The time taken by an application to respond to a request. It is also also referred to as Application Delay (AD) or Application Response Time. | 4 | Enabled by AVC Metrics |
| 9 | 9308 | art-srt-min (IPFIX_CISCO_ART_SRT_MIN) | The time taken by an application to respond to a request. It is also referred to as Application Delay (AD) or Application Response Time. | 4 | Enabled by AVC Metrics |
| 9 | 9313 | cisco-net-time (IPFIX_CISCO_NETWORK_TIME_SUM) | Network Time is known as the round-trip time that is the summation of CND and SND. It is also referred to as Network Delay (ND). | 4 | Enabled by AVC Metrics |
| 9 | 9316 | art-cnt (IPFIX_CISCO_ART_CNT_SUM) | The round trip time between SYN & SYN-ACK and also referred to as Server Network Delay (SND). | 4 | Enabled by AVC Metrics |
| 9 | 9317 | art-cnt-max (IPFIX_CISCO_ART_CNT_MAX) | The round trip time between SYN & SYN-ACK and also referred to as Server Network Delay (SND). | 4 | Enabled by AVC Metrics |
| 9 | 9318 | art-cnt-min (IPFIX_CISCO_ART_CNT_MIN) | The round trip time between SYN & SYN-ACK and also referred to as Server Network Delay (SND). | 4 | Enabled by AVC Metrics |
| 9 | 9319 | art-snt (IPFIX_CISCO_ART_SNT_SUM) | The round trip time between SYN-ACK & ACK. | 4 | Enabled by AVC Metrics |
| 9 | 9320 | art-snt-max (IPFIX_CISCO_ART_SNT_MAX) | The round trip time between SYN-ACK & ACK. | 4 | Enabled by AVC Metrics |
| 9 | 9321 | art-snt-min (IPFIX_CISCO_ART_SNT_MIN) | The round trip time between SYN-ACK & ACK. | 4 | Enabled by AVC Metrics |
| 9 | 12235 | cisco-http-info (IPFIX_CISCO_HTTP_INFO) | Cisco HTTP Host and URL | any | Enabled by AVC HTTP |
| 637 | 93 | src ip4 (IPFIX_ALU_NAT_SUB_STRING) | A string that represents the NAT subscriber construct. The original source IP address (before NAT is performed) is included in this string. For example: LSN-Host@10.10.10.101 | 4 | Not applicable |
| 3054 | 183 | http-host (IPFIX_IXIA_HTTP_HOSTNAME) | IXIA HTTP Hostname | any | Enabled by HTTP Host and URL |
| 3054 | 184 | http-url (IPFIX_IXIA_HTTP_URI) | IXIA HTTP URI | any | Enabled by HTTP Host and URL |
| 6876 | 950 | nsx-rule-id (IPFIX_VMWARE_RULEID) | Firewall rule ID | 4 | Enabled by NSX |
| 6876 | 951 | nsx-vmuuid (IPFIX_VMWARE_VMUUID) | Index of the VNIC for the specified virtual machine | 16 | Enabled by NSX |
| 6876 | 952 | nsx-vnicindex (IPFIX_VMWARE_VNICINDEX) | Uniquely identifies virtual machine | 4 | Enabled by NSX |
| 26866 | 1 | gigamon-http-host-url (IPFIX_GIGAMON_HTTP_REQUEST_URL) | Gigamon HTTP Request URL | any | Enabled by HTTP Host and URL |
| 26866 | 2 | http-response-code (IPFIX_GIGAMON_HTTP_RESPONSE_CODE) | Gigamon HTTP Response Code | 2 | Enabled by HTTP Host and URL |
| 26866 | 101 | tls-certificate-issuer-common-name (IPFIX_GIGAMON_SSL_CER_ISSUER_NAME) | Gigamon SSL certificate issuer name | any | Enabled by SSL |
| 26866 | 102 | tls-subject-common-name (IPFIX_GIGAMON_SSL_CER_SUBJECT_NAME) | Gigamon SSL certificate subject name | any | Enabled by SSL |
| 26866 | 105 | tls-valid-from (IPFIX_GIGAMON_SSL_CER_VALID_NOT_BEFORE) | Gigamon SSL certificate not valid before | 8 | Enabled by SSL |
| 26866 | 106 | tls-valid-to (IPFIX_GIGAMON_SSL_CER_VALID_NOT_AFTER) | Gigamon SSL certificate not valid after | 8 | Enabled by SSL |
| 26866 | 107 | tls-certificate-serial-number (IPFIX_GIGAMON_SSL_CER_SERIAL_NUMBER) | Gigamon SSL certificate serial number | 20 | Enabled by SSL |
| 26866 | 108 | tls-signature-algorithm-asn1 (IPFIX_GIGAMON_SSL_CER_SIG_ALG) | Gigamon SSL certificate signature algorithm | 9 | Enabled by SSL |
| 26866 | 109 | tls-public-key-algorithm-asn1 (IPFIX_GIGAMON_SSL_CER_SUBJECT_PUB_ALG) | Gigamon SSL certificate subject public algorithm | 9 | Enabled by SSL |
| 26866 | 110 | tls-certificate-subject-public-key-size (IPFIX_GIGAMON_SSL_CER_SUBJECT_PUB_KEY_SIZE) | Gigamon SSL certificate subject public algorithm size | 2 | Enabled by SSL |
| 26866 | 111 | tls-certificate-subject-alternate-names (IPFIX_GIGAMON_SSL_CER_SUBJECT_ALT_NAMES) | Gigamon SSL certificate subject alternate names | any | Enabled by SSL |
| 26866 | 112 | tls-server-name-indication (IPFIX_GIGAMON_SSL_SERVER_NAME_INDICATION) | Gigamon SSL server name indication | any | Enabled by SSL |
| 26866 | 113 | tls-server-version (IPFIX_GIGAMON_SSL_SERVER_VERSION) | Gigamon SSL server version | 2 | Enabled by SSL |
| 26866 | 114 | tls-cipher-suite (IPFIX_GIGAMON_SSL_SERVER_CIPHER) | Gigamon SSL server cipher | 2 | Enabled by SSL |
| 26866 | 115 | tls-server-comporession-method (IPFIX_GIGAMON_SSL_SERVER_COMPRESSION_METHOD) | Gigamon SSL server compression method | 1 | Enabled by SSL |
| 26866 | 116 | tls-server-session-id (IPFIX_GIGAMON_SSL_SERVER_SESSION_ID) | Gigamon SSL server session ID | 32 | Enabled by SSL |
| 26866 | 201 | dns-id (IPFIX_GIGAMON_DNS_IDENTIFIER) | Gigamon DNS identifier generated by the device that creates DNS query | 2 | Enabled by DNS |
| 26866 | 202 | dns-op-code (IPFIX_GIGAMON_DNS_OP_CODE) | Gigamon DNS Op code which specifies the query type | 1 | Enabled by DNS |
| 26866 | 203 | dns-response-code (IPFIX_GIGAMON_DNS_DNS_RESPONSE_CODE) | Gigamon DNS response code which specifies the response | 1 | Enabled by DNS |
| 26866 | 204 | dns-query-name (IPFIX_GIGAMON_DNS_QUERY_NAME) | Gigamon DNS query name | any | Enabled by DNS |
| 26866 | 205 | dns-response-name (IPFIX_GIGAMON_DNS_REPONSE_NAME) | Gigamon DNS response name | any | Enabled by DNS |
| 26866 | 206 | dns-response-ttl (IPFIX_GIGAMON_DNS_REPONSE_TTL) | Gigamon DNS response TTL | 4 | Enabled by DNS |
| 26866 | 207 | dns-response-ip4 (IPFIX_GIGAMON_DNS_REPONSE_IPV4_ADDR) | Gigamon DNS IPv4 address in the response | 4 | Enabled by DNS |
| 26866 | 208 | dns-response-ip6 (IPFIX_GIGAMON_DNS_REPONSE_IPV6_ADDR) | Gigamon DNS IPv6 address in the response | 16 | Enabled by DNS |
| 26866 | 1608 | radius-called-station-id (IPFIX_GIGAMON_RADIUS_CALLED_STATION_ID) | Gigamon RADIUS Called station ID | any | Enabled by RADIUS |
| 26866 | 1637 | radius-calling-station-id (IPFIX_GIGAMON_RADIUS_CALLING_STATION_ID) | Gigamon RADIUS Calling station ID | any | Enabled by RADIUS |
| 26866 | 1647 | radius-login (IPFIX_GIGAMON_RADIUS_LOGIN) | Gigamon RADIUS Username | any | Enabled by RADIUS |
| 26866 | 10002 | radius-nas-address (IPFIX_GIGAMON_RADIUS_NAT_ADDRESS) | Gigamon RADIUS NAT IP address | 4 | Enabled by RADIUS |
| 26866 | 10003 | radius-port-start (IPFIX_GIGAMON_RADIUS_PORT_START) | Gigamon RADIUS NAT port start | 4 | Enabled by RADIUS |
| 26866 | 10004 | radius-port-end (IPFIX_GIGAMON_RADIUS_PORT_END) | Gigamon RADIUS NAT port end | 4 | Enabled by RADIUS |
| 35632 | 123 | client-latency (%CLIENT_NW_LATENCY_MS) | Network RTT/2 client <-> nprobe (msec) | 4 | Not applicable |
| 35632 | 124 | server-latency (%SERVER_NW_LATENCY_MS) | Network RTT/2 nprobe <-> server (msec) | 4 | Not applicable |
| 35632 | 125 | app-latency (%APPL_LATENCY_MS) | Application latency (msec), also known as server response time | 4 | Not applicable |