NSX-T Data Center REST API
TraceflowObservationForwardedLogical (schema)
| Name | Description | Type | Notes | 
|---|---|---|---|
| acl_rule_id | The id of the L3 firewall rule that was applied to forward the traceflow packet This field is specified when the traceflow packet matched a L3 firewall rule.  | 
            
            integer | Readonly | 
| component_id | The id of the component that forwarded the traceflow packet. | string | Readonly | 
| component_name | The name of the component that issued the observation. | string | Readonly | 
| component_sub_type | The sub type of the component that issued the observation. | TraceflowComponentSubType | Readonly | 
| component_type | The type of the component that issued the observation. | TraceflowComponentType | Readonly | 
| dst_component_id | The id of the destination component to which the traceflow packet was forwarded. | string | Readonly | 
| dst_component_name | The name of the destination component to which the traceflow packet was forwarded. | string | Readonly | 
| dst_component_type | The type of the destination component to which the traceflow packet was forwarded. | TraceflowComponentType | Readonly | 
| ipsec_vpn | IPSec VPN on which the traceflow packet was forwarded This field is specified when the traceflow packet was forwarded through IPSec VPN.  | 
            
            TraceflowObservationIpsecVpn | Readonly | 
| jumpto_rule_id | The ID of the jump-to rule that was applied to the traceflow packet This field is specified when the traceflow packet matched a jump-to rule.  | 
            
            integer | Readonly | 
| l2_rule_id | The ID of the l2 rule that was applied to the traceflow packet This field is specified when the traceflow packet matched a l2 rule.  | 
            
            integer | Readonly | 
| lport_id | The id of the logical port through which the traceflow packet was forwarded. | string | Readonly | 
| lport_name | The name of the logical port through which the traceflow packet was forwarded. | string | Readonly | 
| nat_rule_id | The ID of the NAT rule that was applied to forward the traceflow packet This field is specified when the traceflow packet matched a NAT rule.  | 
            
            integer | Readonly | 
| next_hop | Next hop IP address of matched routing entry This field is specified when the traceflow packet was routed by logical router.  | 
            
            IPAddress | Readonly | 
| resend_type | The type of packet resending ARP_UNKNOWN_FROM_CP - Unknown ARP query result emitted by control plane ND_NS_UNKNOWN_FROM_CP - Unknown neighbor solicitation query result emitted by control plane UNKNOWN - Unknown resend type  | 
            
            string | Readonly Enum: UNKNOWN, ARP_UNKNOWN_FROM_CP, ND_NS_UNKNWON_FROM_CP  | 
          
| resource_type | Must be set to the value TraceflowObservationForwardedLogical | TraceflowObservationType | Required Default: "TraceflowObservationReceived"  | 
          
| route_prefix | Prefix of matched routing entry This field is specified when the traceflow packet was routed by logical router.  | 
            
            IPCIDRBlock | Readonly | 
| sequence_no | the sequence number is the traceflow observation hop count the hop count for observations on the transport node that a traceflow packet is injected in will be 0. The hop count is incremented each time a subsequent transport node receives the traceflow packet. The sequence number of 999 indicates that the hop count could not be determined for the containing observation.  | 
            
            integer | Required Readonly  | 
          
| service_index | The index of the service insertion component | integer | Readonly | 
| service_path_index | The path index of the service insertion component | integer | Readonly | 
| service_ttl | The ttl of the service insertion component | integer | Readonly | 
| site_path | Policy path of the federated site This field contains the site path where this observation was generated.  | 
            
            string | Readonly | 
| spoofguard_ip | Prefix IP address matched in the whitelist in spoofguard This field specified the prefix IP address a traceflow packet matched in the whitelist in spoofguard.  | 
            
            IPCIDRBlock | Readonly | 
| spoofguard_mac | MAC address matched in the whitelist in spoofguard The source MAC address of form: "^([0-9A-Fa-f]{2}[:-]){5}([0-9A-Fa-f]{2})$". For example: 00:00:00:00:00:00.  | 
            
            MACAddress | Readonly | 
| spoofguard_vlan_id | VLAN id matched in the whitelist in spoofguard This field specified the VLAN id a traceflow packet matched in the whitelist in spoofguard.  | 
            
            VlanID | Readonly | 
| svc_nh_mac | MAC address of nexthop MAC address of nexthop for service insertion(SI) in service VM(SVM) where the traceflow packet was received.  | 
            
            string | Readonly | 
| timestamp | Timestamp when the observation was created by the transport node Timestamp when the observation was created by the transport node (milliseconds epoch)  | 
            
            EpochMsTimestamp | Readonly | 
| timestamp_micro | Timestamp when the observation was created by the transport node Timestamp when the observation was created by the transport node (microseconds epoch)  | 
            
            integer | Readonly | 
| translated_dst_ip | The translated destination IP address of VNP/NAT | IPAddress | Readonly | 
| translated_src_ip | The translated source IP address of VPN/NAT | IPAddress | Readonly | 
| transport_node_id | id of the transport node that observed a traceflow packet | string | Readonly | 
| transport_node_name | name of the transport node that observed a traceflow packet | string | Readonly | 
| transport_node_type | type of the transport node that observed a traceflow packet | TransportNodeType | Readonly | 
| vlan | VLAN for the logical network on which the traceflow packet was forwarded This field is specified when the traceflow packet was forwarded by a VLAN logical network.  | 
            
            VlanID | Readonly | 
| vni | VNI for the logical network on which the traceflow packet was forwarded. This field is specified when the traceflow packet was forwarded by an overlay logical network.  | 
            
            int | Readonly |