Datastructure from node-netflowv9
{
"header": {
"version": 5,
"count": 7,
"uptime": 11121481,
"seconds": 1431787315,
"nseconds": 0,
"sequence": 63077,
"engine_type": 0,
"engine_id": 0,
"sampling_interval": 0
},
"flows": [
{
"ipv4_src_addr": "192.168.1.1",
"ipv4_dst_addr": "192.168.1.10",
"ipv4_next_hop": "0.0.0.0",
"input_snmp": 1,
"output_snmp": 0,
"in_pkts": 6,
"in_bytes": 706,
"first_switched": 11105515,
"last_switched": 11105535,
"ipv4_src_port": 80,
"ipv4_dst_port": 55543,
"tcp_flags": 27,
"protocol": 6,
"src_tos": 0,
"in_as": 0,
"out_as": 0,
"src_mask": 0,
"dst_mask": 0
},
"rinfo": {
"address": "192.168.1.1",
"family": "IPv4",
"port": 49337,
"size": 360
},
Then some raw packet storage? not sure