LIST OF ITEMS SUPPORTED BY Net::NfDump

first => Timestamp of the first packet seen (in miliseconds)
last => Timestamp of the last packet seen (in miliseconds)
received => Timestamp regarding when the packet was received by collector
bytes => The number of bytes
packets => The number of packets
outbytes => The number of output bytes
outpackets => The number of output packets
flows => The number of flows (aggregated)
srcport => Source port
dstport => Destination port
flags => TCP flags
srcip => Source IP address
dstip => Destination IP address
nextip => IP next hop
srcmask => Source mask
dstmask => Destination mask
tos => Source type of service
dsttos => Destination type of service
srcas => Source AS number
dstas => Destination AS number
nextas => BGP Next AS
prevas => BGP Previous AS
bgpnexthop => BGP next hop
proto => IP protocol
srcvlan => Source vlan label
dstvlan => Destination vlan label
insrcmac => In source MAC address
outsrcmac => Out destination MAC address
indstmac => In destination MAC address
outdstmac => Out source MAC address
mpls => MPLS labels
inif => SNMP input interface number
outif => SNMP output interface number
dir => Flow directions ingress/egress
fwd => Forwarding status
routerip => Exporting router IP
engine-type => Type of exporter
engine-id => Internal SysID of exporter
eventtime => NSEL The time that the flow was created
connid => NSEL An identifier of a unique flow for the device
icmp-code => NSEL ICMP code value
icmp-type => NSEL ICMP type value
xevent => NSEL Extended event code
xsrcip => NSEL Mapped source IPv4 address
xdstip => NSEL Mapped destination IPv4 address
xsrcport => NSEL Mapped source port
xdstport => NSEL Mapped destination port
iacl => Hash value or ID of the ACL name
iace => Hash value or ID of the ACL name
ixace => Hash value or ID of an extended ACE configuration
eacl => Hash value or ID of the ACL name
eace => Hash value or ID of the ACL name
exace => Hash value or ID of an extended ACE configuration
username => NSEL username
ingressvrfid => NEL NAT ingress vrf id
eventflag => NAT event flag (always set to 1 by nfdump)
egressvrfid => NAT egress VRF ID
blockstart => NAT pool block start
blockend => NAT pool block end
blockstep => NAT pool block step
blocksize => NAT pool block size
cl => nprobe latency client_nw_delay_usec
sl => nprobe latency server_nw_delay_usec
al => nprobe latency appl_latency_usec
event => NSEL Extended event code
ingressacl => 96 bit value including all items in ACL (iacl, iace, ixace)
egressacl => 96 bit value including all items in ACL (eacl, eace, exace)
inetfamily => IENT family for src/dst IP address (ipv4 or ipv6); platform dependant
exporterid => Exporter IP address
exporterid => Exporter Observation Domain ID
exporterversion => Version of exporter
exporterversion => Naumber of sequence failures of data received from exporter
samplermode => Sampling mode
sampleinterval => Ssampling interval
samplerid => Sampler ID assigned by exporting device
pkts => The number of packets
outpkts => The number of output packets
nexthop => IP next hop
router => Exporting router IP
systype => Type of exporter
sysid => Internal SysID of exporter
icmpcode => NSEL ICMP code value
icmptype => NSEL ICMP type value
tcpflags => TCP flags
srcnet => Source IP address
dstnet => Destination IP address
duration => Flow duration (in milliseconds)
bps => Bytes per second
pps => Packets per second
bpp => Bytes per packet
port => Source or destination port (pair field)
ip => Source or destination ip address (pair field)
as => Source or destination ASn (pair field)
if => Input or output interface (pair field)
vlan => Source or destination vlan (pair field)
net => Source or destination ip address (pair field)