R3166-R3206-HP High-End Firewalls System Management and Maintenance Configuration Guide-6PW101

67
Field Descri
p
tion
SrcPort TCP/UDP source port number
DestPort TCP/UDP destination port number
StartTime Start time of a flow, in seconds, counted from 1970/1/1 0:0
EndTime End time of a flow, in seconds, counted from 1970/1/1 0:0
Prot Protocol carried over IP
Operator Indicates the reason why a flow has ended
Reserved For future applications
Table 13 Packet format in flow logging version 3.0
Field Descri
p
tion
Prot Protocol carried over IP
Operator Indicates the reason why a flow has ended.
IpVersion IP packet version
TosIPv4 ToS field of the IPv4 packet
SourceIP Source IP address
SrcNatIP Source IP address after Network Address Translation (NAT)
DestIP Destination IP address
DestNatIP Destination IP address after NAT
SrcPort TCP/UDP source port number
SrcNatPort TCP/UDP source port number after NAT
DestPort TCP/UDP destination port number
DestNatPort TCP/UDP destination port number after NAT
StartTime Start time of a flow, in seconds, counted from 1970/01/01 00:00.
EndTime End time of a flow, in seconds, counted from 1970/01/01 00:00.
InTotalPkg Number of packets received
InTotalByte Number of bytes received
OutTotalPkg Number of packets sent
OutTotalByte Number of the bytes sent
Reserved1
• Reserved in version 0x02 (FirewallV200R001);
• In version 0x03 (FirewallV200R005), the first byte is the source VPN ID, the second
byte is the destination VPN ID, and the third and forth bytes are reserved.
Reserved2 For future applications
Reserved3 For future applications