{{indexmenu_n>6}} ======Flow statistics output====== Command: fdpi_cli dump flow cache format =====Output format===== Output example: nthr=1 slic=3 proto=6 ip_1=192.168.4.20:65163 ip_2=217.69.133.145:443 ssid=1675E5CF5FB1337 dpip=91 ittr=16 tmlb='2019/10/30 02:02:51, -357.642147s (4148500652028035 ticks)' ialf=0 drct=0x1 iown=1 ilst=1 btsip=0x2 tcpbts_0='-APRSF' tcpbts_1='-AP-S-' qoest=0 qoef_0=0 qoef_1=0 qoer_0=6 qoer_1=6 whip=94.140.198.86:33326 itrnsld=1 igcache=0 gre_pid=0 gre_mtd=0 Field descriptions: * ''nthr=1'' — thread number where the entry is placed (for multicluster setups, it may differ from ''iown'') * ''slic=3'' — cache slice number * ''proto=6'' — IP protocol * ''ip_1=192.168.4.20:65163 ip_2=217.69.133.145:443'' — pair of IP addresses and ports identifying the entry. If the protocol does not use ports, the trailing values are ''0'' * ''ssid=1675E5CF5FB1337'' — session identifier * ''dpip=91'' — DPI protocol * ''ittr=16'' — index in the reused entry queue * ''tmlb='2019/10/30 02:02:51, -357.642147s (4148500652028035 ticks)' '' — last access time for the entry * ''ialf=0'' — processing queue number: * ''en_nalfs_shrt = 0'' — short-lived queue * ''en_nalfs_long = 1'' — long-lived queue * ''drct=0x1'' — conditions under which the entry was created. The lower 4 bits define the packet direction used to create the key and, accordingly, the ownership of ''src_ip'' and ''dst_ip''\\ drct = h_ip_1 < h_ip_2 : * ''drct == 0'' — ''h_ip_1'' is ''src_ip'' * ''drct == 1'' — ''h_ip_1'' is ''dst_ip''\\ the upper 4 bits define the ''flw_dir'' used when the key was created * ''iown=1'' — thread number that created the entry * ''ilst=1'' — thread number that last processed the entry * ''btsip=0x2'' — service bits for flow processing * ''tcpbts_0='-APRSF' tcpbts_1='-AP-S-' '' — TCP connection flags in both directions:( tcp_bits_ & 0x0020 ) ? 'U' : '-' ( tcp_bits_ & 0x0010 ) ? 'A' : '-' ( tcp_bits_ & 0x0008 ) ? 'P' : '-' ( tcp_bits_ & 0x0004 ) ? 'R' : '-' ( tcp_bits_ & 0x0002 ) ? 'S' : '-' ( tcp_bits_ & 0x0001 ) ? 'F' : '-' * ''qoest=0'' — QoE status: * ''enst_none = 0'', * ''enst_ack'' — waiting for client ACK in response to server SYN+ACK * ''enst_fin_ack'' — waiting for server FIN+ACK in response to client FIN * ''enst_ack_srvfin'' — waiting for server ACK in response to client FIN+ACK (server sent FIN first) * ''qoef_0=0 qoef_1=0'' — number of fragmented packets in both directions * ''qoer_0=6 qoer_1=6'' — number of retransmissions in both directions * ''pktp_0=1 pktp_1=0'' — number of packets with payload in both directions, up to 65000 * ''btsp_0=1 btsp_1=0'' — payload volume in both directions, up to 65K * ''whoisc=0'' or ''1'' — connection initiator * **Optional** — if NAT translation is present: * ''whip=94.140.198.86:33326'' — allocated public IP address and port * ''itrnsld=1'' — profile data index used to allocate the public address * ''igcache=0'' — index in the corresponding gray-to-public address translation cache slice * ''gre_pid=0'' — detected callid * ''gre_mtd=0'' — public address allocation method for GRE