Specifications

NetFlow Version 9 Templates
May 18, 2011 Page 17 of 21
specificdatarecordsareonlysupportedbyIPv4templates.IPv6specificdatarecordsareonly
supportedbyIPv6templates.
Table 8detailstheadditionalNetFlowVersion9datarecordfieldsspecifictoagivenVersion9
template.
Table 7 NetFlow Version 9 Template Data Record Field Support
NetFlow Version 9 Base Data Record Fields
Data Field Description Templates
SIP (Source) IPv4 or IPv6 address of the device that
transmitted the packet.
256 - 271 IPv4 addresses
272 - 287 IPv6 addresses
DIP (Destination) IPv4 or IPv6 address of the
destination device.
256 - 271 IPv4 addresses
272 - 287 IPv6 addresses
Dest IfIndex MIBII 32-bit ID of the interface on which the
packet was transmitted.
All templates
Source IfIndex MIBII 32-bit ID of the interface on which the
packet was received.
All templates
Packet Count The number of packets switched through this flow. All templates
Byte Count The number of bytes switched through this flow. All templates
Start Time sysUptime in milliseconds at which the first packet
of this flow was switched.
All templates
Last Time sysUptime in milliseconds at which the last packet
of this flow was switched.
All templates
IP Protocol IP protocol for this flow. All templates
Source TOS (Source) Type of service field value for this flow. All templates
Table 8 NetFlow Version 9 Additional Template Specific Data Record Field Support
NetFlow Version 9 Additional Template Specific Data Record Fields
Data Field Description Templates
Source MAC Source MAC addresses for this flow. IPv4: 257, 259, 261, 263,
265, 267, 269, 271
IPv6: 272, 274, 276, 278,
280, 282, 284, 286
Destination MAC Destination MAC addresses for this flow. IPv4: 257, 259, 261, 263,
265, 267, 269, 271
IPv6: 272, 274, 276, 278,
280, 282, 284, 286
Source VLAN Source VLAN ID associated with the ingress
interface for this flow.
IPv4: 258, 259, 262, 263,
266, 267, 270, 271
IPv6: 273, 274, 277, 278,
281, 282, 285, 286