Link Search Menu Expand Document

Flow Export Tab

Administration > General Settings > Setup > Flow Export

This tab summarizes how the appliances are configured to export statistical data to NetFlow and IPFIX collectors. The Flow Exporting Enabled setting allows the appliance to export the data to collectors. The appliance exports flows against two virtual interfaces—sp_lan and sp_wan—that accumulate the total of LAN-side and WAN-side traffic, regardless of physical interface.

To open the Flow Export Configuration dialog box, click the Edit icon.

Custom Information Elements

The following table describes the Custom Information Elements.

Custom IE Name and Implementation DescriptionSemanticsUnitsField Length (bytes)Enterprise ID
clientIPv4Address

TCP: source ipv4 address of SYN initiator is the client.

UDP: source ipv4 address of the first packet is the client.
default 41
serverIPv4Address

TCP: destination ipv4 address of SYN initiator is the client.

UDP: destination ipv4 address of the first packet is the client.
default 42
connectionInitiator

TCP: source ipv4 address of SYN initiator is the connection initiator.

UDP: source ipv4 address of the first packet is the connection initiator.
default 47
Custom IE Name and Implementation DescriptionSemanticsUnitsField Length (bytes)Enterprise ID
connectionNumberOfConnections

Number of TCP connections (3-way handshake) or UDP sessions established.
totalCounter 19
connectionServerResponsesCountCurrently 1totalCounter 110
connectionTransactionCompleteCountCurrently 1totalCounter 121
Custom IE Name and Implementation DescriptionSemanticsUnitsField Length (bytes)Enterprise ID
connectionServerResponseDelay

TCP: Round-trip time between SYN and SYN-ACK.

UDP: Round-trip time between first onward and return packet.
 MS411
connectionNetworkToServerDelay

TCP: Round-trip time between SYN and SYN-ACK.

UDP: Round-trip time between first onward and return packet. It is also called Server Network Delay (SND).
 MS412
connectionNetworkToClientDelay

TCP: Round trip between SYN-ACK and ACK.

UDP: Round-trip time between first response and second request packet. It is also called Client Network Delay (CND).
 MS413
connectionClientPacketRetransmissionCountCurrently 1totalCounter 414
connectionClientToServerNetworkDelay

Network Time/Network Delay is known as the round-trip time that is the summation of CND and SND. It is also called Network Delay (ND).
 MS415
connectionApplicationDelay

TCP: Round-trip time between SYN and SYN-ACK.

UDP: Round-trip time between first onward and return packet.
 MS416
connectionClientToServerResponseDelay

The round-trip time that is the summation of CND and SND.
 MS417
connectionTransactionDuration

The flow displays the time difference between the first and last packet.
 MS418
connectionTransactionDurationMin

The flow displays the time difference between the first and last packet.
 MS419
connectionTransactionDurationMax

The flow displays the time difference between the first and last packet.
 MS420
Custom IE Name and Implementation DescriptionSemanticsUnitsField Length (bytes)Enterprise ID
connectionServerOctetDeltaCount

Server initiated byte count. If flow is lan to wan, Lan-Tx byte counter. If flow is wan to lan Lan-Rx byte counter.
deltaCounteroctets83
connectionServerPacketDeltaCount

Server initiated byte count. If flow is lan to wan, Lan-Tx byte counter. If flow is wan to lan Lan-Rx byte counter.
deltaCounterpackets84
connectionClientOctetDeltaCount

Server initiated byte count. If flow is lan to wan, Lan-Tx byte counter. If flow is wan to lan Lan-Rx byte counter.
deltaCounteroctets85
connectionClientPacketDeltaCount

Server initiated byte count. If flow is lan to wan, Lan-Tx byte counter. If flow is wan to lan Lan-Rx byte counter.
deltaCounterpackets86
Custom IE Name and Implementation DescriptionSemanticsUnitsField Length (bytes)Enterprise ID
applicationHttpHost

http destination domain name
default variable length8
applicationCategory

Application group
default variable length27
from-zone(source zone)

Name for the flow when ZBF is configured
default variable length22
to-zone(destination zone)

Name for the flow when ZBF is configured
  variable length23
tag

User-specified readable string/tag that can be specified when the ZBF rule is configured. If “tag” is not specified, an automatic tag will be created and exported. The automatic/default tag is constructed by concatenating __. For example, "lan-zone_corp-zone_10000".
default variable length24
overlay

Overlay name the zone belongs to.
default variable length25
direction

Direction of the flow: outbound or inbound.
default variable length26

Back to top

© Copyright 2022 Hewlett Packard Enterprise Development LP. The information contained herein is subject to change without notice. The only warranties for Hewlett Packard Enterprise products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. Hewlett Packard Enterprise shall not be liable for technical or editorial errors or omissions contained herein. Aruba Networks and the Aruba logo are registered trademarks of Aruba Networks, Inc. Third-party trademarks mentioned are the property of their respective owners. To view the end-user software agreement, go to Aruba EULA.