Indexing Reference
The system may have multiple levels of nesting, for example there are 3 IPv4 address in a packet then ipv4_0_src, ipv4_1_src, ipv4_2_src.
ether_[0..3]_dst
destination MAC, 6 bytes
ether_[0..3]_src
source MAC, 6 bytes
ether_[0..3]_type
EtherType of this ethernet layer
vlan_[0..7]_tpid
VLAN TPID (0x8100 / 0x9100 / 0x88a8)
vlan_[0..7]_vid
12-bit VLAN ID
mpls_[0..7]_id
20-bit MPLS label
mpls_[0..7]_tc
3-bit MPLS traffic class
geneve_[0..3]_vni
24-bit GENEVE network identifier
ipv4_[0..5]_src
IPv4 source address, network order
ipv4_[0..5]_dst
IPv4 destination address, network order
ipv4_[0..5]_proto
IP protocol number of the payload
ipv4_[0..5]_is_frag
packet is a non-first IP fragment
ipv6_[0..3]_proto
IPv6 next-header protocol number
ipv6_[0..3]_src
IPv6 source address, 16 bytes
ipv6_[0..3]_dst
IPv6 destination address, 16 bytes
tcp_[0..3]_port_src
TCP source port
tcp_[0..3]_port_dst
TCP destination port
udp_[0..3]_port_src
UDP source port
udp_[0..3]_port_dst
UDP destination port
gre_X_proto
GRE payload protocol (EtherType)
icmp_[0..3]_type
ICMP message type
sctp_[0..1]_port_src
SCTP source port
sctp_[0..1]_port_dst
SCTP destination port
gtpc_0_version
GTP-C protocol version (1 or 2)
gtpc_0_teid
GTP-C tunnel endpoint id
gtpc_0_imsi
IMSI extracted from the GTP-C IEs (0 if absent)
gtpc_0_imei
IMEI extracted from the GTP-C IEs (0 if absent)
gtpc_0_msisdn
MSISDN extracted from the GTP-C IEs (0 if absent)
gtpc_0_teid
GTP-U tunnel endpoint id
tapagg_[0..3]_ts
tap aggregation device timestamp, nanosecond epoch
tapagg_[0..3]_device_type
type of tapagg metadata found
arista7280_eth64
aritsa7130 (metawatch)
tapagg_[0..3]_device
aggregation device id (0 if the format has none)
tappagg_[0..3]_port
device ingress port (0 if the format has none)
tapagg_[0..3]_flag
device specific flags