{{indexmenu_n>6}}
======Flow statistics output======
Command:
fdpi_cli dump flow cache format
=====Output format=====
Output example:
nthr=1 slic=3 proto=6 ip_1=192.168.4.20:65163 ip_2=217.69.133.145:443 ssid=1675E5CF5FB1337 dpip=91 ittr=16 tmlb='2019/10/30 02:02:51, -357.642147s (4148500652028035 ticks)' ialf=0 drct=0x1 iown=1 ilst=1 btsip=0x2 tcpbts_0='-APRSF' tcpbts_1='-AP-S-' qoest=0 qoef_0=0 qoef_1=0 qoer_0=6 qoer_1=6 whip=94.140.198.86:33326 itrnsld=1 igcache=0 gre_pid=0 gre_mtd=0
Field descriptions:
* ''nthr=1'' — thread number where the entry is placed (for multicluster setups, it may differ from ''iown'')
* ''slic=3'' — cache slice number
* ''proto=6'' — IP protocol
* ''ip_1=192.168.4.20:65163 ip_2=217.69.133.145:443'' — pair of IP addresses and ports identifying the entry. If the protocol does not use ports, the trailing values are ''0''
* ''ssid=1675E5CF5FB1337'' — session identifier
* ''dpip=91'' — DPI protocol
* ''ittr=16'' — index in the reused entry queue
* ''tmlb='2019/10/30 02:02:51, -357.642147s (4148500652028035 ticks)' '' — last access time for the entry
* ''ialf=0'' — processing queue number:
* ''en_nalfs_shrt = 0'' — short-lived queue
* ''en_nalfs_long = 1'' — long-lived queue
* ''drct=0x1'' — conditions under which the entry was created. The lower 4 bits define the packet direction used to create the key and, accordingly, the ownership of ''src_ip'' and ''dst_ip''\\ drct = h_ip_1 < h_ip_2 :
* ''drct == 0'' — ''h_ip_1'' is ''src_ip''
* ''drct == 1'' — ''h_ip_1'' is ''dst_ip''\\ the upper 4 bits define the ''flw_dir'' used when the key was created
* ''iown=1'' — thread number that created the entry
* ''ilst=1'' — thread number that last processed the entry
* ''btsip=0x2'' — service bits for flow processing
* ''tcpbts_0='-APRSF' tcpbts_1='-AP-S-' '' — TCP connection flags in both directions:( tcp_bits_ & 0x0020 ) ? 'U' : '-'
( tcp_bits_ & 0x0010 ) ? 'A' : '-'
( tcp_bits_ & 0x0008 ) ? 'P' : '-'
( tcp_bits_ & 0x0004 ) ? 'R' : '-'
( tcp_bits_ & 0x0002 ) ? 'S' : '-'
( tcp_bits_ & 0x0001 ) ? 'F' : '-'
* ''qoest=0'' — QoE status:
* ''enst_none = 0'',
* ''enst_ack'' — waiting for client ACK in response to server SYN+ACK
* ''enst_fin_ack'' — waiting for server FIN+ACK in response to client FIN
* ''enst_ack_srvfin'' — waiting for server ACK in response to client FIN+ACK (server sent FIN first)
* ''qoef_0=0 qoef_1=0'' — number of fragmented packets in both directions
* ''qoer_0=6 qoer_1=6'' — number of retransmissions in both directions
* ''pktp_0=1 pktp_1=0'' — number of packets with payload in both directions, up to 65000
* ''btsp_0=1 btsp_1=0'' — payload volume in both directions, up to 65K
* ''whoisc=0'' or ''1'' — connection initiator
* **Optional** — if NAT translation is present:
* ''whip=94.140.198.86:33326'' — allocated public IP address and port
* ''itrnsld=1'' — profile data index used to allocate the public address
* ''igcache=0'' — index in the corresponding gray-to-public address translation cache slice
* ''gre_pid=0'' — detected callid
* ''gre_mtd=0'' — public address allocation method for GRE