yfFlow_st Struct Reference

A YAF flow. More...

#include <yafcore.h>

Data Fields
uint64_t	stime
	Flow start time in epoch milliseconds.
uint64_t	etime
	Flow end time in epoch milliseconds.
int32_t	rdtime
	Reverse flow delta start time in milliseconds.
uint8_t	reason
	Flow termination reason (YAF_END_ macros, per IPFIX standard).
uint8_t	sourceMacAddr [ETHERNET_MAC_ADDR_LENGTH]
	src Mac Address
uint8_t	destinationMacAddr [ETHERNET_MAC_ADDR_LENGTH]
	destination Mac Address
yfFlowVal_t	val
	Forward value.
yfFlowVal_t	rval
	Reverse value.
yfFlowKey_t	key
	Flow key.

---

Detailed Description

A YAF flow.

Joins a flow key with forward and reverse flow values in time.

Note:

if you edit the layout of this structure, you must make a corresponding edit of the yfFlowIPv4_t structure in yaftab.c

---

Field Documentation

int32_t yfFlow_st::rdtime

Reverse flow delta start time in milliseconds.

Equivalent to initial packet round-trip time; useful for decomposing biflows into uniflows.

---

The documentation for this struct was generated from the following file:

• yafcore.h