Receiving NetFlow push messages
Eseye sends customer-specific Netflow data as raw push messages to subscribed customers. Each record appears in the format described below.
Raw push message/json
Schema
| Object name | Type | Description |
|---|---|---|
| destinationAddressIP | string | The IP address where the data was sent. |
| destinationPort | string | The port where the network connection ended. |
| duration | string | Reporting period, in seconds, rounded to the third decimal point. |
| eventDateTime | DateTime |
Date and time the data capture started. UTC format: YYYY-MM-DDThh:mm:ss.ssssss, where T is the time separator. |
| firstDateTime | DateTime |
Date and time the reporting started. UTC format: YYYY-MM-DDThh:mm:ss.ssssss, where T is the time separator. |
| imei | string |
The International Mobile Equipment Identity number that identifies the device to which the SIM is currently connected. |
| imsi | string |
The unique International Mobile Subscriber Identity number that identifies a cellular network subscriber. The network operator that provided the IMSI uses it to authenticate a SIM (and the IoT device containing the SIM) on the network. |
| inBytes | string | The amount of data transferred to the SIM during the reported session, in bytes. |
| inPackets | string | The total number of IP packets received by the SIM during the reported session. |
| lastDateTime | DateTime |
Date and time the reporting ended. UTC format: YYYY-MM-DDThh:mm:ss.ssssss, where T is the time separator. |
| match | string |
Describes where the data originated, either source or destination. |
| meId | string | Unused. |
| outBytes | string | The amount of data transferred from the SIM during the reported session, in bytes. |
| outPackets | string | The total number of IP packets sent by the SIM during the reported session. |
| portfolioId | string | The SIAM account portfolio identifier. Contains exactly 32 characters. |
| protocol | string | The transport protocol used. |
| simId | string | The SIM's unique serial number. |
| sourceAddressIP | string | The IP address where the data originated. |
| sourcePort | string | The port where the network connection originated. |
Example
{
"firstDateTime":"2021-03-02T12:48:44.181000",
"lastDateTime":"2021-03-02T12:48:44.873000",
"duration":"180.692",
"protocol":"TCP",
"sourceAddressIP":"10.235.187.134",
"sourcePort":"52863",
"destinationAddressIP":"54.94.219.110",
"destinationPort":"21000",
"inPackets":"81",
"outPackets":"81",
"inBytes":"76209",
"outBytes":"3240",
"imsi": "234588558496446",
"simId": "5170000201264588",
"portfolioId": "000459cb1f57e1be0099c533687e68cc",
"match": "destination",
"eventDateTime": "2021-03-02T12:48:46.050316",
"meId": "",
"imei": "358598610003734"
}
