traffic
Traffic flows stored every minute.
Many of the attributes in the view correspond to fields in data packets, for example: macsource, ipdestination, ipxdestination and tcpsourceport. The fields sourceaddress, sourceport, destinationaddress and destinationport are computed dynamically and return the highest layer addresses and ports in the packet flow. For example, a TCP flow will have source and destination IP addresses and MAC addresses. In this case the sourceaddress field will automatically return the ipsource address. In the case of a layer 2 flow (such as an ARP request) the sourceaddress would return the macsource. Finally, the server and client addresses and ports are computed dynamically and correspond to the service direction as determined by the port priority settings (see File>Configure). For example a flow in which the destination port is TCP:80 would assign the serveraddress to the ipdestination and the serverport would be assigned to the tcpdestinationport (TCP:80).
| ID | Type | Key | Name |
|---|---|---|---|
| aarpdestination | address | yes | AARP Destination |
| aarpsource | address | yes | AARP Source |
| agent | agent | yes | Agent |
| aoeoperation | string | yes | AOE Operation |
| aoestatus | string | yes | AOE Status |
| aoetarget | string | yes | AOE Target |
| arphardwaretype | string | yes | ARP H/W Type |
| arpip6sender | address | yes | ARP IPv6 Sender |
| arpip6target | address | yes | ARP IPv6 Target |
| arpipsender | address | yes | ARP IP Sender |
| arpiptarget | address | yes | ARP IP Target |
| arpmacsender | address | yes | ARP MAC Sender |
| arpmactarget | address | yes | ARP MAC Target |
| arpoperation | string | yes | ARP Operation |
| arpprotocoltype | string | yes | ARP Protocol Type |
| bgpas | as | yes | Local AS |
| bgpcommunities | as | yes | BGP Communities |
| bgpdestinationas | as | yes | Destination AS |
| bgpdestinationaspath | as | yes | Destination AS Path |
| bgpdestinationpeeras | as | yes | Destination Peer AS |
| bgplocalpref | integer | yes | BGP Local Preference |
| bgpnexthop | address | yes | BGP Next Hop |
| bgpnexthop6 | address | yes | BGP IPv6 Next Hop |
| bgpsourceas | as | yes | Source AS |
| bgpsourcepeeras | as | yes | Source Peer AS |
| bytes | integer | no | Bytes |
| bytesfromserver | integer | no | Bytes From Server |
| bytestoserver | integer | no | Bytes To Server |
| classificationid | string | yes | Protocol Classification ID |
| clientaddress | address | yes | Client Address |
| clientcountry | string | yes | Client Country |
| cliententerprise | string | yes | Client Enterprise |
| clientgroup | string | yes | Client Group |
| clientname | string | yes | Client Name |
| clientpath | path | yes | Client Path |
| clientport | port | yes | Client Port |
| clientsite | string | yes | Client Site |
| clientsubnet | string | yes | Client Subnet |
| clientzone | string | yes | Client Zone |
| ddpdestination | address | yes | AppleTalk Destination |
| ddpdestinationport | port | yes | AppleTalk Destination Port |
| ddpsource | address | yes | AppleTalk Source |
| ddpsourceport | port | yes | AppleTalk Source Port |
| dec4destination | address | yes | DECnet IV Destination |
| dec4port | port | yes | DECnet IV Port |
| dec4source | address | yes | DECnet IV Source |
| destinationaddress | address | yes | Destination Address |
| destinationagententerprise | string | yes | Host Destination Enterprise |
| destinationagentgroup | string | yes | Host Destination Group |
| destinationagentsite | string | yes | Host Destination Site |
| destinationagentzone | string | yes | Host Destination Zone |
| destinationcountry | string | yes | Destination Country |
| destinationdomain2 | string | yes | Destination Domain |
| destinationenterprise | string | yes | Destination Enterprise |
| destinationgroup | string | yes | Destination Group |
| destinationname | string | yes | Destination Name |
| destinationpath | path | yes | Destination Path |
| destinationport | port | yes | Destination Port |
| destinationsite | string | yes | Destination Site |
| destinationsubnet | string | yes | Destination Subnet |
| destinationzone | string | yes | Destination Zone |
| dsci | string | yes | Datasource Class-Index |
| dstishost | integer | yes | Host Destination? |
| enterprise | string | yes | Enterprise |
| ethernetprotocol | port | yes | Ethernet Protocol |
| ethernetprotocol.1 | port | yes | Inner Ethernet Protocol |
| fcclient | address | yes | FC Client |
| fcdestination | address | yes | FC Destination |
| fcserver | address | yes | FC Server |
| fcsource | address | yes | FC Source |
| frames | integer | no | Frames |
| frames_in | integer | no | Frames In |
| frames_out | integer | no | Frames Out |
| framesfromserver | integer | no | Frames From Server |
| framestoserver | integer | no | Frames To Server |
| function | string | yes | Function |
| geneve_vni | string | yes | GENEVE VNI |
| gre_version | string | yes | GRE version |
| gre_vsid | string | yes | NVGRE VSID |
| group | string | yes | Group |
| grouppath | string | yes | Group Path |
| has_app | integer | yes | Has App. Counters? |
| has_host | integer | yes | Has Host Counters? |
| has_http | integer | yes | Has HTTP Counters? |
| has_if | integer | yes | Has I/F Counters? |
| has_java | integer | yes | Has Java Counters? |
| has_memcache | integer | yes | Has Memcache Counters? |
| has_switch | integer | yes | Has Switch Counters? |
| has_vm | integer | yes | Has VM Counters? |
| httpcommand | string | yes | HTTP Command |
| httpdirection | integer | yes | HTTP Direction |
| httphost | string | yes | HTTP Host |
| httpmethod | string | yes | HTTP Method |
| httpurl | string | yes | HTTP URL |
| hwtrap_group | string | yes | Discard HW Group |
| hwtrap_name | string | yes | Discard HW Name |
| icmp6code | string | yes | ICMPv6 Code |
| icmp6code.1 | string | yes | Inner ICMPv6 Code |
| icmp6type | port | yes | ICMPv6 Type |
| icmp6type.1 | port | yes | Inner ICMPv6 Type |
| icmpcode | string | yes | ICMP Code |
| icmpcode.1 | string | yes | Inner ICMP Code |
| icmptype | port | yes | ICMP Type |
| icmptype.1 | port | yes | Inner ICMP Type |
| icmpunreachableport | port | yes | ICMP Unreachable Port |
| ieee802sap | port | yes | IEEE 802 SAP |
| ifindex | string | yes | I/F |
| igmpip | address | yes | IGMP Group |
| inputifindex | string | yes | IfIndex In |
| inputinterface | interface | yes | I/F In |
| interface | interface | yes | Interface |
| ip6client | address | yes | IPv6 Client Address |
| ip6destination | address | yes | IPv6 Destination |
| ip6destination.1 | address | yes | Inner IPv6 Destination |
| ip6destinationname | string | yes | IPv6 Destination Name |
| ip6destinationsubnet | subnet | yes | IPv6 Destination Subnet |
| ip6dscp | string | yes | IPv6 DSCP |
| ip6dscp.1 | string | yes | Inner IPv6 DSCP |
| ip6label | string | yes | IPv6 Label |
| ip6label.1 | string | yes | Inner IPv6 Label |
| ip6nexthoprouter | address | yes | IPv6 Next Hop |
| ip6server | address | yes | IPv6 Server Address |
| ip6source | address | yes | IPv6 Source |
| ip6source.1 | address | yes | Inner IPv6 Source |
| ip6sourcename | string | yes | IPv6 Source Name |
| ip6sourcesubnet | subnet | yes | IPv6 Source Subnet |
| ip6tos | string | yes | IPv6 TOS |
| ip6tos.1 | string | yes | Inner IPv6 TOS |
| ipbadchecksum | integer | no | IP Bad Checksum |
| ipbadfragoff | integer | no | IP Bad Fragmentation |
| ipclient | address | yes | IP Client |
| ipdestination | address | yes | IP Destination |
| ipdestination.1 | address | yes | Inner IP Destination |
| ipdestinationname | string | yes | IP Destination Name |
| ipdestinationsubnet | subnet | yes | IP Destination Subnet |
| ipdscp | string | yes | IP DSCP |
| ipdscp.1 | string | yes | Inner IP DSCP |
| ipnexthoprouter | address | yes | IP Next Hop |
| ipprotocol | port | yes | IP Protocol |
| ipprotocol.1 | port | yes | Inner IP Protocol |
| ipserver | address | yes | IP Server |
| ipsource | address | yes | IP Source |
| ipsource.1 | address | yes | Inner IP Source |
| ipsourcename | string | yes | IP Source Name |
| ipsourcesubnet | subnet | yes | IP Source Subnet |
| iptos | string | yes | IP TOS |
| iptos.1 | string | yes | Inner IP TOS |
| ipttl | integer | yes | IP TTL |
| ipttl.1 | integer | yes | Inner IP TTL |
| ipversion | integer | yes | IP Version |
| ipversion.1 | integer | yes | Inner IP Version |
| ipxdestination | address | yes | IPX Destination |
| ipxdestinationport | port | yes | IPX Destnation Port |
| ipxsource | address | yes | IPX Source |
| ipxsourceport | port | yes | IPX Source Port |
| isbroadcast | integer | yes | Broadcast? |
| iscsiopcode | string | yes | ISCSI opcode |
| islayer3multicast | integer | yes | Layer 3 Multicast? |
| ismulticast | integer | yes | Multicast? |
| isunicast | integer | yes | Unicast? |
| linkspeed | integer | yes | Link Speed |
| linux_reason | string | yes | Discard Reason Linux |
| llbytes | integer | no | Layer2 Bytes |
| llbytes_in | integer | no | Layer2 Bytes In |
| llbytes_out | integer | no | Layer2 Bytes Out |
| llframes | integer | no | Layer2 Frames |
| llutilization | double | no | Utilization |
| macclient | address | yes | MAC Client |
| macdestination | address | yes | MAC Destination |
| macdestination.1 | address | yes | Inner MAC Destination |
| macdestinationvendor | string | yes | MAC Destination Vendor Code |
| macserver | address | yes | MAC Server |
| macsource | address | yes | MAC Source |
| macsource.1 | address | yes | Inner MAC Source |
| macsourcevendor | string | yes | MAC Source Vendor Code |
| mplscosin | address | yes | MPLS CoS In |
| mplscosout | address | yes | MPLS CoS Out |
| mplsftn | string | yes | MPLS FTN |
| mplsftnmask | integer | yes | MPLS FTN Mask |
| mplsldpfecprefix | integer | yes | MPLS LDP FEC Prefix |
| mplsstackin | address | yes | MPLS Label Stack In |
| mplsstackout | address | yes | MPLS Label Stack Out |
| mplstunnel | string | yes | MPLS Tunnel |
| mplstunnelcos | string | yes | MPLS Tunnel COS |
| mplstunnelid | string | yes | MPLS Tunnel ID |
| mplsvc | string | yes | MPLS VC |
| mplsvccos | string | yes | MPLS VC COS |
| mplsvcid | string | yes | MPLS VC ID |
| myipversion | string | yes | myipversion |
| natdst | address | yes | NAT Destination |
| natdst6 | address | yes | NAT IPv6 Destination |
| natdstport | integer | yes | NAT Destination Port |
| natsrc | address | yes | NAT Source |
| natsrc6 | address | yes | NAT IPv6 Source |
| natsrcport | integer | yes | NAT Source Port |
| outputifindex | string | yes | IfIndex Out |
| outputinterface | interface | yes | I/F Out |
| outputqueue | integer | yes | Output Queue |
| pbbdst | address | yes | PBB Destination |
| pbbisid | string | yes | PBB ISID |
| pbbsrc | address | yes | PBB Source |
| protocol | string | yes | Protocol |
| protocolgroup | string | yes | Protocol Group |
| protocolstack | string | yes | Protocol Stack |
| queuedepth | integer | no | Queue Depth |
| reason | string | yes | Discard Reason |
| routerifdst | interface | yes | Destination I/F |
| routerifsrc | interface | yes | Source I/F |
| rtpjitter | double | no | RTP Jitter |
| rtplostfraction | double | no | RTP Lost Fraction |
| rtppayload | port | yes | RTP Codec |
| scsilun | string | yes | SCSI LUN |
| scsilunidx | string | yes | SCSI LUN Id |
| scsiop | string | yes | SCSI Operation |
| serveraddress | address | yes | Server Address |
| servercountry | string | yes | Server Country |
| serverenterprise | string | yes | Server Enterprise |
| servergroup | string | yes | Server Group |
| servername | string | yes | Server Name |
| serverpath | path | yes | Server Path |
| serverport | port | yes | Server Port |
| serversite | string | yes | Server Site |
| serversubnet | string | yes | Server Subnet |
| serverzone | string | yes | Server Zone |
| sipmethod | string | yes | SIP Method |
| siptarget | string | yes | SIP Target |
| site | string | yes | Site |
| sitepath | string | yes | Site Path |
| size64 | integer | no | Size 64 |
| sizejumbo | integer | no | Size >1518 |
| sizeto1023 | integer | no | Size 512-1023 |
| sizeto127 | integer | no | Size 65-127 |
| sizeto1518 | integer | no | Size 1024-1518 |
| sizeto255 | integer | no | Size 128-255 |
| sizeto511 | integer | no | Size 256-511 |
| sizeto63 | integer | no | Size 0-63 |
| sourceaddress | address | yes | Source Address |
| sourceagententerprise | string | yes | Host Source Enterprise |
| sourceagentgroup | string | yes | Host Source Group |
| sourceagentsite | string | yes | Host Source Site |
| sourceagentzone | string | yes | Host Source Zone |
| sourcecountry | string | yes | Source Country |
| sourcedomain2 | string | yes | Source Domain |
| sourceenterprise | string | yes | Source Enterprise |
| sourcegroup | string | yes | Source Group |
| sourcename | string | yes | Source Name |
| sourcepath | path | yes | Source Path |
| sourceport | port | yes | Source Port |
| sourcesite | string | yes | Source Site |
| sourcesubnet | string | yes | Source Subnet |
| sourcezone | string | yes | Source Zone |
| srcishost | integer | yes | Host Source? |
| stproot | address | yes | STP Root |
| synackcount | integer | no | TCP SYN ACK Count |
| syncount | integer | no | TCP SYN Count |
| synonlycount | integer | no | TCP SYN Only Count |
| tcpdestinationport | port | yes | TCP Destination Port |
| tcpdestinationport.1 | port | yes | Inner TCP Destination Port |
| tcpflags | string | yes | TCP Flags |
| tcplost | integer | no | TCP Lost |
| tcppmtu | integer | no | TCP Path MTU |
| tcpretrans | integer | no | TCP Retransmitted |
| tcprtt | integer | no | TCP RTT |
| tcprttmin | integer | no | TCP Min RTT |
| tcprttvar | integer | no | TCP RTT Variance |
| tcpsourceport | port | yes | TCP Source Port |
| tcpsourceport.1 | port | yes | Inner TCP Source Port |
| time | time | yes | Time |
| transitdelay | integer | no | Transit Delay |
| transportbytes | integer | no | Transport Bytes |
| trillbridgein | integer | yes | TRILL RBridge Ingress |
| trillbridgeout | integer | yes | TRILL RBridge Egress |
| trillhops | integer | yes | TRILL Hops |
| trilloptions | string | yes | TRILL Options |
| udpdestinationport | port | yes | UDP Destination Port |
| udpdestinationport.1 | port | yes | Inner UDP Destination Port |
| udpsourceport | port | yes | UDP Source Port |
| udpsourceport.1 | port | yes | Inner UDP Source Port |
| useriddestination | string | yes | Destination User |
| useridsource | string | yes | Source User |
| uuidclient | string | yes | UUID Client |
| uuiddestination | string | yes | UUID Destination |
| uuidserver | string | yes | UUID Server |
| uuidsource | string | yes | UUID Source |
| vlan | null | yes | VLAN |
| vlandestination | null | yes | VLAN Out |
| vlandestinationname | string | yes | VLAN Name Out |
| vlandestinationpriority | integer | yes | Priority Out |
| vlanpriority | integer | yes | Priority |
| vlansource | null | yes | VLAN In |
| vlansourcename | string | yes | VLAN Name In |
| vlansourcepriority | integer | yes | Priority In |
| vlanstack | address | yes | VLAN Stack |
| vni_in | string | yes | VNI in |
| vni_out | string | yes | VNI out |
| vrf_in | string | yes | Ingress VRF ID |
| vrf_out | string | yes | Egress VRF ID |
| vxlan_vni | string | yes | VXLAN VNI |
| wifibssid | address | yes | WiFi BSSID |
| wifichannel | string | yes | WiFi Channel |
| wificipher | string | yes | WiFi Cipher |
| wifictrlst | integer | yes | WiFi Ctrl. St. |
| wifirxcp | integer | no | WiFi RX CP |
| wifirxsn | integer | no | WiFi RX SNI |
| wifirxus | double | no | WiFi RX uS |
| wifissid | string | yes | WiFi SSID |
| wifiversion | string | yes | WiFi Version |
| zone | string | yes | Zone |
| zonepath | string | yes | Zone Path |