Understanding NDE
Table 51-4 NDE Version 7 Flow Record Format
Bytes
Content
Description
0–3
srcaddr
Source IP address
4–7
dstaddr
Destination IP address
8–11
nexthop
Next hop router's IP address
12–13 input
Ingress interface SNMP ifIndex
14–15 output
Egress interface SNMP ifIndex
16–19 dPkts
Packets in the flow
20–23 dOctets
Octets (bytes) in the flow
24–27 First
SysUptime at start of the flow (milliseconds)
28–31 Last
SysUptime at the time the last packet
of the flow was received (milliseconds)
32–33 srcport
Layer 4 source port number or equivalent
34–35 dstport
Layer 4 destination port number or equivalent
36
flags
Flow mask in use
37
tcp_flags
Cumulative OR of TCP flags
38
prot
Layer 4 protocol
(for example, 6=TCP, 17=UDP)
39
tos
IP type-of-service byte
40–41 src_as
Autonomous system number of the source,
either origin or peer
42–43 dst_as
Autonomous system number of the
destination, either origin or peer
44
src_mask
Source address prefix mask bits
45
dst_mask
Destination address prefix mask bits
46–47 pad2
Pad 2
48–51 MLS RP
IP address of MLS router
1. Always zero when PBR, WCCP, or SLB is configured.
2. With the destination flow mask, the "Next hop router's IP address" field and the "Output interface's SNMP ifIndex" field might not contain information
that is accurate for all flows.
3. Always zero when policy-based routing is configured.
4. In PFC3BXL or PFC3B mode, for ICMP traffic, contains the ICMP code and type values.
5. Always zero for hardware-switched flows.
6. Populated with Release 12.2(17b)SXA and later releases in PFC3BXL or PFC3B mode.
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
51-6
Flow masks:
• X=Populated
• A=Additional field (see the
NDE Fields" section on page
X
0
1
0
0
3
0
X
X
X
X
0
0
X
5
0
0
6
X
X
0
X
0
0
0
Chapter 51
"Populating Additional
51-12)
0
X
X
X
X
X
2
A
A
A
0
0
X
2
A
A
A
X
X
X
X
X
X
X
X
X
X
X
X
0
0
0
0
0
0
X
X
X
0
0
0
0
0
0
6
6
6
X
X
X
0
X
X
X
X
X
0
X
X
X
X
X
0
0
0
X
X
X
Configuring NDE
X
X
X
X
A
A
0
X
A
A
X
X
X
X
X
X
X
X
4
4
X
X
X
X
X
X
0
0
X
X
6
6
X
X
X
X
X
X
X
X
X
X
0
0
X
X
OL-4266-08