下表列出了 IPFIX 資訊元素定義。

384 valueDistributionMethod 用來散發計數器的方法說明,該計數器從提供流量至彙總流量的記錄如相關聯範圍 (通常是範本) 所描述。系統會將該方法視為套用至參考範圍內的所有非金鑰資訊元素,值散發對其為有效的操作。如果 originalFlowsInitiated 和/或 originalFlowsCompleted 資訊元素顯示在範本中,則其不會受此散發方法的約束,因為它們會各自推斷其自己的散發方式。這是一組完整的可能值散發方法;其編碼方式如下:
+-------+-----------------------------------------------------------+ 

| Value | Description                                               | 

+-------+-----------------------------------------------------------+ 

| 0     | Unspecified: The counters for an Original Flow are        | 

|       | explicitly not distributed according to any other method | 

|       | defined for this Information Element; use for arbitrary   | 

|       | distribution, or distribution algorithms not described by | 

|       | any other codepoint.                                      | 

|       | --------------------------------------------------------- | 

|       |                                                           | 

| 1     | Start Interval: The counters for an Original Flow are     | 

|       | added to the counters of the appropriate Aggregated Flow | 

|       | containing the start time of the Original Flow.  This     | 

|       | must be assumed the default if value distribution       | 

|       | information is not available at a Collecting Process for | 

|       | an Aggregated Flow.                                       | 

|       | --------------------------------------------------------- | 

|       |                                                           | 

| 2     | End Interval: The counters for an Original Flow are added | 

|       | to the counters of the appropriate Aggregated Flow        | 

|       | containing the end time of the Original Flow.             | 

|       | --------------------------------------------------------- | 

|       |                                                           | 

| 3     | Mid Interval: The counters for an Original Flow are added | 

|       | to the counters of a single appropriate Aggregated Flow   | 

|       | containing some timestamp between start and end time of   | 

|       | the Original Flow.                                        | 

|       | --------------------------------------------------------- | 

|       |                                                           | 

| 4     | Simple Uniform Distribution: Each counter for an Original | 

|       | Flow is divided by the number of time intervals the       | 

|       | Original Flow covers (that is, of appropriate Aggregated     | 

|       | Flows sharing the same Flow Key), and this number is      | 

|       | added to each corresponding counter in each Aggregated    | 

|       | Flow.                                                     | 

|       | --------------------------------------------------------- | 

|       |                                                           | 

| 5     | Proportional Uniform Distribution: Each counter for an    | 

|       | Original Flow is divided by the number of time units the | 

|       | Original Flow covers, to derive a mean count rate.  This | 

|       | mean count rate is then multiplied by the number of times | 

|       | units in the intersection of the duration of the Original | 

|       | Flow and the time interval of each Aggregated Flow.  This | 

|       | is like simple uniform distribution, but accounts for the | 

|       | fractional portions of a time interval covered by an      | 

|       | Original Flow in the first- and last-time interval.        | 

|       | --------------------------------------------------------- | 

|       |                                                           | 

| 6     | Simulated Process: Each counter of the Original Flow is   | 

|       | distributed among the intervals of the Aggregated Flows   | 

|       | according to some function the Intermediate Aggregation   | 

|       | Process uses based upon properties of Flows presumed to   | 

|       | be like the Original Flow.  This is essentially an        | 

|       | assertion that the Intermediate Aggregation Process has   | 

|       | no direct packet timing information but is nevertheless   | 

|       | not using one of the other simpler distribution methods.  | 

|       | The Intermediate Aggregation Process specifically makes   | 

|       | no assertion as to the correctness of the simulation.     | 

|       | --------------------------------------------------------- | 

|       |                                                           | 

| 7     | Direct: The Intermediate Aggregation Process has access   | 

|       | to the original packet timings from the packets making up | 

|       | the Original Flow, and uses these to distribute or        | 

|       | recalculate the counters.                                 | 

+-------+-----------------------------------------------------------+ 
239 biflowDirection 用來指派 Biflow 來源和目的地方向指派方法的說明。此資訊元素可能存在於流量資料記錄中,或是套用至使用 IPFIX 選項從匯出程序或觀察網域匯出的所有流量。如果此資訊元素不存在流量記錄中或透過範圍與 Biflow 相關聯,則系統會假定方向指派方法的組態是在頻外完成。
備註: 使用 IPFIX 選項將此資訊元素套用至觀察網域內或來自匯出程序的所有流量時,必須可靠地傳送選項。如果可靠傳輸無法使用 (也就是使用 UDP 時),則此資訊元素必須顯示在每個流量記錄中。
此欄位可能會採用下列值:
+-------+------------------+----------------------------------------+ 

| Value | Name             | Description                            | 

+-------+------------------+----------------------------------------+ 

| 0x00  | arbitrary        | Direction is assigned arbitrarily.    | 

| 0x01  | initiator        | The Biflow Source is the flow          | 

|       |                  | initiator, as determined by the        | 

|       |                  | Metering Process' best effort to       | 

|       |                  | detect the initiator.                  | 

| 0x02  | reverseInitiator | The Biflow Destination is the flow     | 

|       |                  | initiator, as determined by the        | 

|       |                  | Metering Process' best effort to       | 

|       |                  | detect the initiator.  This value is   | 

|       |                  | provided for the convenience of        | 

|       |                  | Exporting Processes to revise an       | 

|       |                  | initiator estimate without re-encoding | 

|       |                  | the Biflow Record.                     | 

| 0x03  | perimeter        | The Biflow Source is the endpoint      | 

|       |                  | outside of a defined perimeter.  The   | 

|       |                  | perimeter's definition is implicit in | 

|       |                  | the set of Biflow Source and Biflow    | 

|       |                  | Destination addresses exported in the | 

|       |                  | Biflow Records.                        | 

+-------+------------------+----------------------------------------+