Kemp Support, how can we help?

The latest application delivery knowledge and expertise at your fingertips.

  1. Kemp Support
  2. Knowledge Base
  3. Flowmon General
  4. Flowmon OS

MAC address flow fields

Updated: 

 

Information

 

Summary:

Description of MAC address flow fields captured by Flowmon
Environment:

Product: Flowmon

Version: Any

Platform: Any
Question/Problem Description:

What is the difference between these flow fields?
INPUT SRC MAC ADDRESS
OUTPUT SRC MAC ADDRESS
INPUT DST MAC ADDRESS
OUTPUT DST MAC ADDRESS
Steps to Reproduce:  
Error Message:  
Defect Number:  
Enhancement Number:  
Cause:  
Resolution:

INPUT SRC MAC ADDRESS: The MAC address of the sender of the packet, which is from the perspective of the router/port the input.
OUTPUT SRC MAC ADDRESS: The MAC address of the sender of the packet, which is from the perspective of the router/port the output.
INPUT DST MAC ADDRESS: The MAC address of the recipient of the packet, which is from the perspective of the router/port the input.
OUTPUT DST MAC ADDRESS: The MAC address of the recipient of the packet, which is from the perspective of the router/port the output.

Flowmon has visibility of the closest L2 network nodes. Direction is defined by the monitored router/switch.

Flowmon_MAC_explanation(2).png
Workaround:  
Notes:

IANA - IP flow information export, for Flowmon applies fields 56 and 80
https://www.iana.org/assignments/ipfix/ipfix.xhtml
Was this article helpful?
0 out of 0 found this helpful

Comments

In this document