Handling NetFlow Records
Based on the NetFlow record, Meraki connector sends flow observation to Secure Workload. Meraki NetFlow flow records are bidirectional. So, Meraki connector sends 2 flows: forward flow and reverse flow to Secure Workload.
Here are the details about flow observation sent by Meraki connector to Secure Workload.
Forward Flow observation
|
Field |
Element ID |
Element Name |
|---|---|---|
|
Protocol |
4 |
protocolIdentifier |
|
Source Address |
8 |
sourceIPv4Address |
|
Source Port |
7 |
sourceTransportPort |
|
Destination Address |
12 |
destinationIPv4Address |
|
Destination Port |
11 |
destinationTransportPort |
|
Byte Count |
1 |
octetDeltaCount |
|
Packet Count |
2 |
packetDeltaCount |
|
Flow Start Time |
Set based on when the NetFlow record for this flow is received on the connector |
Reverse Flow Information
|
Field |
Element ID |
|
|---|---|---|
|
Protocol |
4 |
protocolIdentifier |
|
Source Address |
8 |
sourceIPv4Address |
|
Source Port |
7 |
sourceTransportPort |
|
Destination Address |
12 |
destinationIPv4Address |
|
Destination Port |
11 |
destinationTransportPort |
|
Byte Count |
23 |
postOctetDeltaCount |
|
Packet Count |
24 |
postPacketDeltaCount |
|
Flow Start Time |
Set based on when the NetFlow record for this flow is received on the connector |