The following fields are in the UDP header for NetFlow v5:
| Name | Description | Offset | Field Length |
|---|---|---|---|
| Version | Type of record format (5=NetFlow-5) | 0 | 2 |
| Count | Number of flow records contained in the UDP packet (maximum of 30) | 2 | 2 |
| SysUpTime | Value of SysUpTime ) when the UDP packet was sent (measured in milliseconds); SysUpTime measures how long the system has been up and running | 4 | 4 |
| Epoch Seconds | Number of seconds between the epoch (January 1, 1970) and the time when the UDP packet was sent. (Epoch is a date used as the "beginning of time" for timestamps. Time values in Unix systems are represented as the number of seconds since the epoch.) | 8 | 4 |
| Nanoseconds | Residual nanoseconds (billionth of a second) after the epoch second | 12 | 4 |
| Flows Seen | Number of flows seen since PacketWise began emitting flow detail records | 16 | 4 |
| Engine Type | User-configurable value (0-255) assigned to the PacketShaper that is emitting flow detail records. Use the setup flowrecords engineType command to assign a type to the unit. | 20 | 1 |
| Engine ID | User-configurable value (0-255) assigned to the PacketShaper that is emitting flow detail records. Use the setup flowrecords engineID command to assign an ID to the unit. | 21 | 1 |
| Sampling Info | n/a | 22 | 2 |
See also:
PacketGuide™ for PacketWise® 7.5