package flowprotob

Get desktop application:
View/edit binary Protocol Buffers messages

• FlowMessage.FlowType Type = 1

• uint64 TimeReceived = 2

• uint32 SequenceNum = 4

• uint64 SamplingRate = 3

• uint32 FlowDirection = 42

• bytes SamplerAddress = 11

  Sampler information

• uint64 TimeFlowStart = 38

  Found inside packet

• uint64 TimeFlowEnd = 5

• uint64 Bytes = 9

  Size of the sampled packet

• uint64 Packets = 10

• bytes SrcAddr = 6

  Source/destination addresses

• bytes DstAddr = 7

• uint32 Etype = 30

  Layer 3 protocol (IPv4/IPv6/ARP/MPLS...)

• uint32 Proto = 20

  Layer 4 protocol

• uint32 SrcPort = 21

  Ports for UDP and TCP

• uint32 DstPort = 22

• uint32 InIf = 18

  Interfaces

• uint32 OutIf = 19

• uint32 IPTos = 23

  IP and TCP special flags

• uint32 ForwardingStatus = 24

• uint32 IPTTL = 25

• uint32 TCPFlags = 26

• uint32 IcmpType = 31

• uint32 IcmpCode = 32

• uint32 IPv6FlowLabel = 37

• uint32 SrcAS = 14

  Autonomous system information

• uint32 DstAS = 15

Used in: FlowMessage

• FLOWUNKNOWN = 0

• SFLOW_5 = 1

• NETFLOW_V5 = 2

• NETFLOW_V9 = 3

• IPFIX = 4