telegraf/plugins/inputs/netflow/mappings_ipfix_pen/ntop-35632.csv

1	# The following data is extracted from
2	# https://www.ntop.org/guides/nprobe/flow_information_elements.html
3	# and contains IPFIX element definitions for Private Enterprise Number (PEN)
4	# 35632 (ntop)
5	#
6	# PEN.ID, name, data type
7	35632.1028,protocol_ntop,string
8	35632.1031,l4_src_port_name,string
9	35632.1035,l4_dst_port_name,string
10	35632.1036,l4_srv_port,uint
11	35632.1037,l4_srv_port_name,string
12	35632.80,src_fragments,uint
13	35632.81,dst_fragments,uint
14	35632.123,client_nw_latency_ms,uint
15	35632.124,server_nw_latency_ms,uint
16	35632.78,client_tcp_flags,uint
17	35632.79,server_tcp_flags,uint
18	35632.125,app_latency_ms,uint
19	35632.471,nprobe_ipv4_address,ip
20	35632.82,src_to_dst_max_throughput,uint
21	35632.83,src_to_dst_min_throughput,uint
22	35632.84,src_to_dst_avg_throughput,uint
23	35632.85,dst_to_src_max_throughput,uint
24	35632.86,dst_to_src_min_throughput,uint
25	35632.87,dst_to_src_avg_throughput,uint
26	35632.88,pkts_up_to_128_bytes,uint
27	35632.89,pkts_128_to_256_bytes,uint
28	35632.90,pkts_256_to_512_bytes,uint
29	35632.91,pkts_512_to_1024_bytes,uint
30	35632.92,pkts_1024_to_1514_bytes,uint
31	35632.93,pkts_over_1514_bytes,uint
32	35632.98,cumulative_icmp_type,uint
33	35632.101,src_ip_country,string
34	35632.102,src_ip_city,string
35	35632.103,dst_ip_country,string
36	35632.104,dst_ip_city,string
37	35632.448,src_ip_long,hex
38	35632.449,src_ip_lat,hex
39	35632.450,dst_ip_long,hex
40	35632.451,dst_ip_lat,hex
41	35632.105,flow_proto_port,uint
42	35632.106,upstream_tunnel_id,uint
43	35632.446,upstream_session_id,uint
44	35632.107,longest_flow_pkt,uint
45	35632.108,shortest_flow_pkt,uint
46	35632.127,retransmitted_in_bytes,uint
47	35632.109,retransmitted_in_pkts,uint
48	35632.128,retransmitted_out_bytes,uint
49	35632.110,retransmitted_out_pkts,uint
50	35632.111,ooorder_in_pkts,uint
51	35632.112,ooorder_out_pkts,uint
52	35632.113,untunneled_protocol,proto
53	35632.114,untunneled_ipv4_src_addr,ip
54	35632.115,untunneled_l4_src_port,uint
55	35632.116,untunneled_ipv4_dst_addr,ip
56	35632.117,untunneled_l4_dst_port,uint
57	35632.118,l7_proto,uint
58	35632.119,l7_proto_name,string
59	35632.120,downstream_tunnel_id,uint
60	35632.447,downstream_session_id,uint
61	35632.188,ssl_server_name,string
62	35632.189,bittorrent_hash,string
63	35632.121,flow_user_name,string
64	35632.122,flow_server_name,string
65	35632.126,plugin_name,string
66	35632.396,untunneled_ipv6_src_addr,ip
67	35632.397,untunneled_ipv6_dst_addr,ip
68	35632.347,pkts_ttl_eq_1,uint
69	35632.346,pkts_ttl_2_5,uint
70	35632.334,pkts_ttl_5_32,uint
71	35632.335,pkts_ttl_32_64,uint
72	35632.336,pkts_ttl_64_96,uint
73	35632.337,pkts_ttl_96_128,uint
74	35632.338,pkts_ttl_128_160,uint
75	35632.339,pkts_ttl_160_192,uint
76	35632.340,pkts_ttl_192_224,uint
77	35632.341,pkts_ttl_224_255,uint
78	35632.349,in_src_osi_sap,hex
79	35632.350,out_dst_osi_sap,hex
80	35632.391,duration_in,uint
81	35632.392,duration_out,uint
82	35632.415,tcp_win_min_in,uint
83	35632.416,tcp_win_max_in,uint
84	35632.417,tcp_win_mss_in,uint
85	35632.418,tcp_win_scale_in,uint
86	35632.419,tcp_win_min_out,uint
87	35632.420,tcp_win_max_out,uint
88	35632.421,tcp_win_mss_out,uint
89	35632.422,tcp_win_scale_out,uint
90	35632.438,payload_hash,uint
91	35632.443,src_as_name,string
92	35632.444,dst_as_name,string
93	35632.472,src_to_dst_second_bytes,uint
94	35632.473,dst_to_src_second_bytes,uint
95	35632.489,ja3c_hash,string
96	35632.490,ja3s_hash,string
97	35632.491,src_host_name,string
98	35632.492,dst_host_name,string
99	35632.493,ssl_cipher,uint
100	35632.494,ssl_unsafe_cipher,uint
101	35632.495,ssl_version,uint