A YAF flow. More...
#include <yafcore.h>
Data Fields | |
uint64_t | stime |
Flow start time in epoch milliseconds. | |
uint64_t | etime |
Flow end time in epoch milliseconds. | |
int32_t | rdtime |
Reverse flow delta start time in milliseconds. | |
uint8_t | reason |
Flow termination reason (YAF_END_ macros, per IPFIX standard). | |
uint8_t | sourceMacAddr [ETHERNET_MAC_ADDR_LENGTH] |
src Mac Address | |
uint8_t | destinationMacAddr [ETHERNET_MAC_ADDR_LENGTH] |
destination Mac Address | |
yfFlowVal_t | val |
Forward value. | |
yfFlowVal_t | rval |
Reverse value. | |
yfFlowKey_t | key |
Flow key. |
A YAF flow.
Joins a flow key with forward and reverse flow values in time.
int32_t yfFlow_st::rdtime |
Reverse flow delta start time in milliseconds.
Equivalent to initial packet round-trip time; useful for decomposing biflows into uniflows.