flows Table
The following table describes the schema of the flows_* SQL tables.
| Field | Type | Description |
|---|---|---|
|
id |
unsigned 32-bit integer |
A unique id that defines this record. This is the primary key. |
|
in_ip |
binary (128 bit) |
A 16 byte (128 bit) representation of the internal IPv6 address (the IPInternet protocol address on the LANLocal area network side of the Exinda appliance) of the flowthe network traffic between network objects. IPv4 addresses are represented as IPv4 mapped format. |
|
ex_ip |
binary (128 bit) |
A 16 byte (128 bit) representation of the external IPv6 address (the IP address on the WANWide Area Network side of the Exinda appliance) of the flow. IPv4 addresses are represented as IPv4 mapped format. |
|
in_port |
unsigned 24-bit integer |
The TCPTransmission Control Protocol or UDPUser Datagram Protocol port number on the internal side (the LAN side of the Exinda appliance) of the flow.1 |
|
ex_port |
unsigned 24-bit integer |
The TCP or UDP port number on the external side (the WAN side of the Exinda appliance) of the flow.1 |
|
protocol |
unsigned 24-bit integer |
The IANA assigned IP protocol number of the flow. See http://www.iana.org/assignments/protocol-numbers/ for more information. |
|
app_id |
unsigned 24-bit integer |
The internal Exinda Application ID assigned to this flow. This represents Exinda's classification of the flow - 0 means unclassified. |
|
packets_in |
unsigned 64-bit integer |
The number of inbound (WAN -> LAN) packets recorded for this flow over the sample period. |
|
bytes_in |
unsigned 64-bit integer |
The number of inbound (WAN -> LAN) bytes recorded for this flow over the sample period. |
|
packets_out |
unsigned 64-bit integer |
The number of outbound (LAN -> WAN) packets recorded for this flow over the sample period. |
|
bytes_out |
unsigned 64-bit integer |
The number of outbound (LAN -> WAN) bytes recorded for this flow over the sample period. |
|
max_tput_in |
unsigned 64-bit integer |
The maximum inbound (WAN -> LAN) throughput observed for this flow during the sample period. |
|
max_tput_out |
unsigned 64-bit integer |
The maximum outbound (LAN -> WAN) throughput observed for this flow during the sample period. |
|
intervals_in |
unsigned 24-bit integer |
The number of 10 second intervals there was inbound (WAN -> LAN) traffic observed for this flow during the sample period (bps). |
|
intervals_out |
unsigned 24-bit integer |
The number of 10 second intervals there was outbound (LAN -> WAN) traffic observed for this flow during the sample period (bps). |
|
timestamp |
unsigned 32-bit integer |
A UNIX timestamp (number of seconds since epoch - 1st Jan 1970) that represents the start of the sample period. |
|
in_username |
string |
A string representation of the username that was assigned to the internal IP of this flow when it was created (if available). |
|
ex_username |
string |
A string representation of the username that was assigned to the external IP of this flow when it was created (if available).1 |
|
rtt |
unsigned 32-bit integer |
Round Trip Time in milliseconds. A measure if the time a packet takes to leave a device, cross a network and return.2 |
|
network_delay |
unsigned 32-bit integer |
A normalized measure of the time taken for transaction data to traverse the network.2 |
|
network_jitter |
unsigned 32-bit integer |
A normalized measure of the network_delay variability.2 |
|
server_delay |
unsigned 32-bit integer |
A normalized measure of the time taken for a server to respond to a transaction request.2 |
|
bytes_lost_in |
unsigned 64-bit integer |
The number of bytes lost due to retransmissions (WAN -> LAN).2 |
|
bytes_lost_out |
unsigned 64-bit integer |
The number of bytes lost due to retransmissions (LAN -> WAN).2 |
|
aps |
unsigned 64-bit integer |
Application Performance Score. A measure of an applications performance on the network.2 |
in_portandex_portare only defined when the IP protocol is TCP (6) or UDP (17) and the Exinda was unable to classify the flow (so the app_id is 0).- For more information refer to Using Application Performance reports.
The flows_* tables are available as views that represent the binary IPv6 addresses in string format. The views tables are flows_*_verbose (e.g. flows_hourly_verbose). The fields are identical to the above except for the following:
| Field | Type | Description |
|---|---|---|
|
in_ip |
string |
A string representation of the internal address (the IP address on the LAN side of the Exinda appliance) of the flow. IPv4 mapped IPv6 addresses are represented as IPv4 dotted quad. |
|
ex_ip |
string |
A string representation of the external address (the IP address on the WAN side of the Exinda appliance) of the flow. IPv4 mapped IPv6 addresses are represented as IPv4 dotted quad. |