ipfix-5----Page:4
1  2  3  4  5  6  7  8  9 

Variable Field Problem
Some fields contain values that may vary among packets
Obvious: Counters
Reporting their value after the last observed packet was processed
Not critical: max/min values
maxTTL, minTTL, maxPacketLength, etc.
Problem: reported header field values that are not constant over the observed packets
TTL, TCP flags, multicast replication factor, but also source address, etc.
Which value to report?
Do we need to indicate variations?
PPT Version