IPFIX - Other Vendors

The Flowmon Collector supports IPFIX flow data from the following vendors:

• Cisco, PEN = 9.

• VMware, PEN = 6876.

• Gigamon, PEN = 26866.

• IXIA, PEN = 3054.

• Nokia (ALU), PEN = 637.

Not all IPFIX fields from other vendors are supported. See the table below for a list of supported IPFIX fields.

Note: None of the following fields are applicable to the Flowmon Probe, they can only be collected by the Flowmon Collector.

PEN	ID	Field	Description	Input Length (bytes)	Collector Configuration
9	9316	IPFIX_CISCO_ART_CNT_SUM	The round trip time between SYN-ACK & ACK. Collect art client network time sum.	4	Enabled by AVC Metrics
9	9317	IPFIX_CISCO_ART_CNT_MAX	The round trip time between SYN-ACK & ACK. Collect art client network time maximum.	4	Enabled by AVC Metrics
9	9318	IPFIX_CISCO_ART_CNT_MIN	The round trip time between SYN-ACK & ACK. Collect art client network time minimum.	4	Enabled byAVC Metrics
9	9319	IPFIX_CISCO_ART_SNT_SUM	The round trip time between SYN & SYN-ACK and also called Server Network Delay (SND). Collect art server network time sum.	4	Enabled by AVC Metrics
9	9320	IPFIX_CISCO_ART_SNT_MAX	The round trip time between SYN & SYN-ACK and also called Server Network Delay (SND). Collect art server network time maximum.	4	Enabled by AVC Metrics
9	9321	IPFIX_CISCO_ART_SNT_MIN	The round trip time between SYN & SYN-ACK and also called Server Network Delay (SND). Collect art server network time minimum.	4	Enabled by AVC Metrics
9	9306	IPFIX_CISCO_ART_SRT_SUM	The time taken by an application to respond to a request. It is also called Application Delay (AD) or Application Response Time. Collect art server response time sum.	4	Enabled by AVC Metrics
9	9307	IPFIX_CISCO_ART_SRT_MAX	The time taken by an application to respond to a request. It is also called Application Delay (AD) or Application Response Time. Collect art server response time maximum.	4	Enabled by AVC Metrics
9	9308	IPFIX_CISCO_ART_SRT_MIN	The time taken by an application to respond to a request. It is also called Application Delay (AD) or Application Response Time. Collect art server response time minimum.	4	Enabled by AVC Metrics
9	9292	IPFIX_CISCO_ART_CNT_RESPONSES	Number of Req-Rsp pairs received within the monitoring interval.	4	Enabled by AVC Metrics
9	9268	IPFIX_CISCO_ART_CLIENT_RETRANSMISSIONS	ART Count Retransmissions metric is the packet count for all the retransmitted client packets	4	Enabled by AVC Metrics
9	9270	IPFIX_CISCO_ART_SERVER_RETRANSMISSIONS	ART Count Retransmissions metric is the packet count for all the retransmitted client packets.	4	Enabled by AVC Metrics
9	9313	IPFIX_CISCO_NETWORK_TIME_SUM	Network Time is known as the round-trip time that is the summation of CND and SND. It is also called Network Delay (ND).	4	Enabled by AVC Metrics
9	9293	IPFIX_CISCO_ART_RES_HIST_1	Number of responses by response time in 7-bucket histogram. Bucket 1, response time < 2 milliseconds.	4	Enabled by AVC Histogram
9	9294	IPFIX_CISCO_ART_RES_HIST_2	Number of responses by response time in 7-bucket histogram. Bucket 2, response time is between 2-5 milliseconds.	4	Enabled by AVC Histogram
9	9295	IPFIX_CISCO_ART_RES_HIST_3	Number of responses by response time in 7-bucket histogram. Bucket 3, response time is between 5-10 milliseconds.	4	Enabled by AVC Histogram
9	9296	IPFIX_CISCO_ART_RES_HIST_4	Number of responses by response time in 7-bucket histogram. Bucket 4, response time is between 10-50 milliseconds.	4	Enabled by AVC Histogram
9	9297	IPFIX_CISCO_ART_RES_HIST_5	Number of responses by response time in 7-bucket histogram. Bucket 5, response time is between 50-100 milliseconds.	4	Enabled by AVC Histogram
9	9298	IPFIX_CISCO_ART_RES_HIST_6	Number of responses by response time in 7-bucket histogram. Bucket 6, response time is between 100-500 milliseconds.	4	Enabled by AVC Histogram
9	9299	IPFIX_CISCO_ART_RES_HIST_7	Number of responses by response time in 7-bucket histogram. Bucket 7, response time is between 500 - 1000 milliseconds.	4	Enabled by AVC Histogram
9	9300	IPFIX_CISCO_ART_RES_LATE	Number of responses received after the max Response Time. Current threshold of timeout is 1 second. Also called Number of late responses (timeouts).	4	Enabled by AVC Histogram
9	12235	IPFIX_CISCO_HTTP_INFO	Cisco HTTP Host and URL	Variable	Enabled by AVC HTTP
6876	950	IPFIX_VMWARE_RULEID	Firewall rule ID	4	Enabled by NSX
6876	951	IPFIX_VMWARE_VMUUID	Uniquely identifies virtual machine	16	Enabled by NSX
6876	952	IPFIX_VMWARE_VNICINDEX	Index of the VNIC for the specified virtual machine	4	Enabled by NSX
26866	1	IPFIX_GIGAMON_HTTP_REQUEST_URL	Gigamon HTTP Request URL	128	Enabled by HTTP Host and URL
26866	1	IPFIX_GIGAMON_HTTP_RESPONSE_CODE	Gigamon HTTP Response Code	2	Enabled by HTTP Host and URL
26866	201	IPFIX_GIGAMON_DNS_IDENTIFIER	Gigamon DNS identifier generated by the device that creates DNS query	1	Enabled by DNS
26866	202	IPFIX_GIGAMON_DNS_OP_CODE	Gigamon DNS Op code which specifies query type	1	Enabled by DNS
26866	203	IPFIX_GIGAMON_DNS_DNS_RESPONSE_CODE	Gigamon DNS response code which specifies response	128	Enabled by DNS
26866	204	IPFIX_GIGAMON_DNS_QUERY_NAME	Gigamon DNS query name	128	Enabled by DNS
26866	205	IPFIX_GIGAMON_DNS_REPONSE_NAME	Gigamon DNS response name	128	Enabled by DNS
26866	206	IPFIX_GIGAMON_DNS_REPONSE_TTL	Gigamon DNS response TTL	4	Enabled byDNS
26866	207	IPFIX_GIGAMON_DNS_REPONSE_IPV4_ADDR	Gigamon DNS IPv4 address in the response	4	Enabled by DNS
26866	208	IPFIX_GIGAMON_DNS_REPONSE_IPV6_ADDR	Gigamon DNS IPv6 address in the response	16	Enabled by DNS
26866	101	IPFIX_GIGAMON_SSL_CER_ISSUER_NAME	Gigamon SSL certificate issuer name	Variable	Enabled by SSL
26866	102	IPFIX_GIGAMON_SSL_CER_SUBJECT_NAME	Gigamon SSL certificate subject name	Variable	Enabled by SSL
26866	105	IPFIX_GIGAMON_SSL_CER_VALID_NOT_BEFORE	Gigamon SSL certificate valid not before	13	Enabled by SSL
26866	106	IPFIX_GIGAMON_SSL_CER_VALID_NOT_AFTER	Gigamon SSL certificate valid not after	13	Enabled by SSL
26866	107	IPFIX_GIGAMON_SSL_CER_SERIAL_NUMBER	Gigamon SSL certificate serial number	20	Enabled by SSL
26866	108	IPFIX_GIGAMON_SSL_CER_SIG_ALG	Gigamon SSL certificate signature algorithm	9	Enabled by SSL
26866	109	IPFIX_GIGAMON_SSL_CER_SUBJECT_PUB_ALG	Gigamon SSL certificate subject public algorithm	9	Enabled by SSL
26866	110	IPFIX_GIGAMON_SSL_CER_SUBJECT_PUB_KEY_SIZE	Gigamon SSL certificate subject public algorithm size	2	Enabled by SSL
26866	111	IPFIX_GIGAMON_SSL_CER_SUBJECT_ALT_NAMES	Gigamon SSL certificate subject alternate names	Variable	Enabled by SSL
26866	112	IPFIX_GIGAMON_SSL_SERVER_NAME_INDICATION	Gigamon SSL server name indication	Variable	Enabled by SSL
26866	113	IPFIX_GIGAMON_SSL_SERVER_VERSION	Gigamon SSL server version	2	Enabled by SSL
26866	114	IPFIX_GIGAMON_SSL_SERVER_CIPHER	Gigamon SSL server cipher	2	Enabled by SSL
26866	115	IPFIX_GIGAMON_SSL_SERVER_COMPRESSION_METHOD	Gigamon SSL server compression method	1	Enabled by SSL
26866	116	IPFIX_GIGAMON_SSL_SERVER_SESSION_ID	Gigamon SSL server session ID	32	Enabled by SSL
26866	1608	IPFIX_GIGAMON_RADIUS_CALLED_STATION_ID	Gigamon RADIUS Called station ID	Variable	Enabled by RADIUS
26866	1637	IPFIX_GIGAMON_RADIUS_CALLING_STATION_ID	Gigamon RADIUS Calling station ID	Variable	Enabled by RADIUS
26866	1647	IPFIX_GIGAMON_RADIUS_LOGIN	Gigamon RADIUS Username	Variable	Enabled by RADIUS
26866	10002	IPFIX_GIGAMON_RADIUS_NAT_ADDRESS	Gigamon RADIUS NAT IP address	4	Enabled by RADIUS
26866	10003	IPFIX_GIGAMON_RADIUS_PORT_START	Gigamon RADIUS NAT port start	4	Enabled by RADIUS
26866	10004	IPFIX_GIGAMON_RADIUS_PORT_END	Gigamon RADIUS NAT port end	4	Enabled by RADIUS
3054	183	IPFIX_IXIA_HTTP_HOSTNAME	IXIA HTTP Hostname	32	Enabled by HTTP Host and URL
3054	184	IPFIX_IXIA_HTTP_URI	IXIA HTTP URI	64	Enabled by HTTP Host and URL
637	93	IPFIX_ALU_NAT_SUB_STRING	A string that represents the NAT subscriber construct. The original IP source address, before NAT is performed is included in this string. For example: LSN-Host@10.10.10.101	Variable	Enabled by NEL Common block, Mapped to an existing field storing SRC NAT IP