Length: In this example, length is 64 bytes (3*(5*4) 4=64, 3 is the number of connections, 5 is each data length, 4 Flow Sets each connections, 4 is the ID and length field) The rest of numbers are parameter values corresponding each parameter type and length that are defined at Template Flow Set.Systems usually take a 5-tuple flow as the criterion of Flow record classification including source&destination addresses, source&destination ports and protocol types.
This is like TLV formatting, except the values recur in groups (records), so rather than repeat the type and length for each group, they appear once in the template, and then the values appear (data records), saving space. In this example, the value is 4 (should be 4 Flow Set), which indicates that only two Flow Sets are showed and other two don't draw on this figure. System Uptime: Runtime since this device was first booted (ms) d.
On the right side, there is a example of Net Flow packet (Version 9). UNIX Second: Seconds since 0000 Coordinated Universal Time (UTC) 1970 e.
Flow Set ID: An unique Flow Set ID (range of 0-255) b. In this example, 5 means there are five fields showed below Field 1: IPv4_SRC_ADDR: IPv4 source address (Value=8, Length=4) Field 2: IPv4_DST_ADDR: IPv4 destination address (Value=12, Length=4) Field 3: IPv4_NEXT_HOP: IPv4 address of next-hop router (Value=15, Length=4) Field 4: PKTS_32: Incoming counter with length 32*8 bits for the number of packets associated with an IP Flow Field 5: BYTES_32: Incoming counter with length 32*8 bits for number of bytes associated with an IP Flow PART 3: Data Flow Set a.
Flow Set ID = Template ID: It maps to a template ID because the data should match template Flow Set b.
Watch hardcore sex and movies from around the world!