There are four KVM Ethernet IPFIX templates: ingress, egress, ingress with tunnel, and egress with tunnel.

Ethernet Ingress

Template ID: 256. Field count: 27.

The fields are:
  • observationPointId (length: 4)
  • DIRECTION (length: 1)
  • SRC_MAC (length: 6)
  • DESTINATION_MAC (length: 6)
  • ethernetType (length: 2)
  • ethernetHeaderLength (length: 1)
  • INPUT_SNMP (length: 4)
  • Unknown(368) (length: 4)
  • IF_NAME (length: variable)
  • IF_DESC (length: variable)
  • 898 (length: variable, PEN: VMware Inc. (6876))
  • flowStartDeltaMicroseconds (length: 4)
  • flowEndDeltaMicroseconds (length: 4)
  • DROPPED_PACKETS (length: 8)
  • DROPPED_PACKETS_TOTAL (length: 8)
  • PKTS (length: 8)
  • PACKETS_TOTAL (length: 8)
  • Unknown(354) (length: 8)
  • Unknown(355) (length: 8)
  • Unknown(356) (length: 8)
  • Unknown(357) (length: 8)
  • Unknown(358) (length: 8)
  • MUL_DPKTS (length: 8)
  • postMCastPacketTotalCount (length: 8)
  • Unknown(352) (length: 8)
  • Unknown(353) (length: 8)
  • flowEndReason (length: 1)

Ethernet Egress

Template ID: 257. Field count: 31.

The fields are:
  • observationPointId (length: 4)
  • DIRECTION (length: 1)
  • SRC_MAC (length: 6)
  • DESTINATION_MAC (length: 6)
  • ethernetType (length: 2)
  • ethernetHeaderLength (length: 1)
  • INPUT_SNMP (length: 4)
  • Unknown(368) (length: 4)
  • IF_NAME (length: variable)
  • IF_DESC (length: variable)
  • OUTPUT_SNMP (length: 4)
  • Unknown(369) (length: 8)
  • IF_NAME (length: variable)
  • IF_DESC (length: variable)
  • 898 (length: variable, PEN: VMware Inc. (6876))
  • flowStartDeltaMicroseconds (length: 4)
  • flowEndDeltaMicroseconds (length: 4)
  • DROPPED_PACKETS (length: 8)
  • DROPPED_PACKETS_TOTAL (length: 8)
  • PKTS (length: 8)
  • PACKETS_TOTAL (length: 8)
  • Unknown(354) (length: 8)
  • Unknown(355) (length: 8)
  • Unknown(356) (length: 8)
  • Unknown(357) (length: 8)
  • Unknown(358) (length: 8)
  • MUL_DPKTS (length: 8)
  • postMCastPacketTotalCount (length: 8)
  • Unknown(352) (length: 8)
  • Unknown(353) (length: 8)
  • flowEndReason (length: 1)

Ethernet Ingress with Tunnel

Template ID: 258. Field count: 34.

The fields are:
  • observationPointId (length: 4)
  • DIRECTION (length: 1)
  • SRC_MAC (length: 6)
  • DESTINATION_MAC (length: 6)
  • ethernetType (length: 2)
  • ethernetHeaderLength (length: 1)
  • INPUT_SNMP (length: 4)
  • Unknown(368) (length: 4)
  • IF_NAME (length: variable)
  • IF_DESC (length: variable)
  • 893 (length: 4, PEN: VMware Inc. (6876))
  • 894 (length: 4, PEN: VMware Inc. (6876))
  • 895 (length: 1, PEN: VMware Inc. (6876))
  • 896 (length: 2, PEN: VMware Inc. (6876))
  • 897 (length: 2, PEN: VMware Inc. (6876))
  • 891 (length: 1, PEN: VMware Inc. (6876))
  • 892 (length: variable, PEN: VMware Inc. (6876))
  • 898 (length: variable, PEN: VMware Inc. (6876))
  • flowStartDeltaMicroseconds (length: 4)
  • flowEndDeltaMicroseconds (length: 4)
  • DROPPED_PACKETS (length: 8)
  • DROPPED_PACKETS_TOTAL (length: 8)
  • PKTS (length: 8)
  • PACKETS_TOTAL (length: 8)
  • Unknown(354) (length: 8)
  • Unknown(355) (length: 8)
  • Unknown(356) (length: 8)
  • Unknown(357) (length: 8)
  • Unknown(358) (length: 8)
  • MUL_DPKTS (length: 8)
  • postMCastPacketTotalCount (length: 8)
  • Unknown(352) (length: 8)
  • Unknown(353) (length: 8)
  • flowEndReason (length: 1)

Ethernet Egress with Tunnel

Template ID: 259. Field count: 38.

The fields are:
  • observationPointId (length: 4)
  • DIRECTION (length: 1)
  • SRC_MAC (length: 6)
  • DESTINATION_MAC (length: 6)
  • ethernetType (length: 2)
  • ethernetHeaderLength (length: 1)
  • INPUT_SNMP (length: 4)
  • Unknown(368) (length: 4)
  • IF_NAME (length: variable)
  • IF_DESC (length: variable)
  • OUTPUT_SNMP (length: 4)
  • Unknown(369) (length: 8)
  • IF_NAME (length: variable)
  • IF_DESC (length: variable)
  • 893 (length: 4, PEN: VMware Inc. (6876))
  • 894 (length: 4, PEN: VMware Inc. (6876))
  • 895 (length: 1, PEN: VMware Inc. (6876))
  • 896 (length: 2, PEN: VMware Inc. (6876))
  • 897 (length: 2, PEN: VMware Inc. (6876))
  • 891 (length: 1, PEN: VMware Inc. (6876))
  • 892 (length: variable, PEN: VMware Inc. (6876))
  • 898 (length: variable, PEN: VMware Inc. (6876))
  • flowStartDeltaMicroseconds (length: 4)
  • flowEndDeltaMicroseconds (length: 4)
  • DROPPED_PACKETS (length: 8)
  • DROPPED_PACKETS_TOTAL (length: 8)
  • PKTS (length: 8)
  • PACKETS_TOTAL (length: 8)
  • Unknown(354) (length: 8)
  • Unknown(355) (length: 8)
  • Unknown(356) (length: 8)
  • Unknown(357) (length: 8)
  • Unknown(358) (length: 8)
  • MUL_DPKTS (length: 8)
  • postMCastPacketTotalCount (length: 8)
  • Unknown(352) (length: 8)
  • Unknown(353) (length: 8)
  • flowEndReason (length: 1)