XML Schema
Schema Comments:
Processing Instructions
Schema has:
 32element definitions,  0 global attribute definitions,  117 element attribute definitions,  2 datatype definitions.
Possible root elements: ArgusDataStream,

Element list

Element ArgusDataStream
 
diagram
description
attributes BeginDate   BeginTime   BeginTimeusec   CurrentDate   CurrentTime   CurrentTimeusec   MajorVersion   MinorVersion   InterfaceType   InterfaceStatus   SourceId   NetAddr   NetMask  
uses ArgusFlowRecord * , ArgusManagementRecord * , ArgusDataStream.End
 
used by
substitution hierarchy ArgusDataStream
content sequence
 
Attribute Datatype Use Values Default Comments
BeginDate { xsd:date } required
BeginTime { xsd:time } required
BeginTimeusec { xsd:int } required
CurrentDate { xsd:date } required
CurrentTime { xsd:time } required
CurrentTimeusec { xsd:int } required
MajorVersion { } {} required range: [2, UNBOUNDED]
MinorVersion { xsd:unsignedByte } required
InterfaceType { } {} required possible values: DLT_NULL | DLT_EN10MB | DLT_EN3MB | DLT_AX25 | DLT_PRONET | DLT_CHAOS | DLT_IEEE802 | DLT_ARCNET | DLT_SLIP | DLT_PPP | DLT_FDDI | DLT_ATM_RFC1483 | DLT_RAW | DLT_SLIP_BSDOS | DLT_PPP_BSDOS | DLT_ATM_CLIP | DLT_PPP_SERIAL | DLT_C_HDLC | DLT_IEE802_11
InterfaceStatus { } {} required possible values: Up | Down
SourceId { xsd:string } required
NetAddr { IPAddress } required
NetMask { IPAddress } required
 
source
- < xsd:element name =" ArgusDataStream " >
- < xsd:complexType >
- < xsd:sequence >
  < xsd:element ref =" ArgusFlowRecord " minOccurs =" 0 " maxOccurs =" unbounded " />
  < xsd:element ref =" ArgusManagementRecord " minOccurs =" 0 " maxOccurs =" unbounded " />
  < xsd:element ref =" ArgusDataStream.End " />
  </ xsd:sequence >
  < xsd:attribute name =" BeginDate " use =" required " type =" xsd:date " />
  < xsd:attribute name =" BeginTime " use =" required " type =" xsd:time " />
  < xsd:attribute name =" BeginTimeusec " use =" required " type =" xsd:int " />
  < xsd:attribute name =" CurrentDate " use =" required " type =" xsd:date " />
  < xsd:attribute name =" CurrentTime " use =" required " type =" xsd:time " />
  < xsd:attribute name =" CurrentTimeusec " use =" required " type =" xsd:int " />
- < xsd:attribute name =" MajorVersion " use =" required " >
- < xsd:simpleType >
- < xsd:restriction base =" xsd:unsignedByte " >
  < xsd:minInclusive value =" 2 " />
  </ xsd:restriction >
  </ xsd:simpleType >
  </ xsd:attribute >
  < xsd:attribute name =" MinorVersion " use =" required " type =" xsd:unsignedByte " />
- < xsd:attribute name =" InterfaceType " use =" required " >
- < xsd:simpleType >
- < xsd:restriction base =" xsd:NMTOKEN " >
  < xsd:enumeration value =" DLT_NULL " />
  < xsd:enumeration value =" DLT_EN10MB " />
  < xsd:enumeration value =" DLT_EN3MB " />
  < xsd:enumeration value =" DLT_AX25 " />
  < xsd:enumeration value =" DLT_PRONET " />
  < xsd:enumeration value =" DLT_CHAOS " />
  < xsd:enumeration value =" DLT_IEEE802 " />
  < xsd:enumeration value =" DLT_ARCNET " />
  < xsd:enumeration value =" DLT_SLIP " />
  < xsd:enumeration value =" DLT_PPP " />
  < xsd:enumeration value =" DLT_FDDI " />
  < xsd:enumeration value =" DLT_ATM_RFC1483 " />
  < xsd:enumeration value =" DLT_RAW " />
  < xsd:enumeration value =" DLT_SLIP_BSDOS " />
  < xsd:enumeration value =" DLT_PPP_BSDOS " />
  < xsd:enumeration value =" DLT_ATM_CLIP " />
  < xsd:enumeration value =" DLT_PPP_SERIAL " />
  < xsd:enumeration value =" DLT_C_HDLC " />
  < xsd:enumeration value =" DLT_IEE802_11 " />
  </ xsd:restriction >
  </ xsd:simpleType >
  </ xsd:attribute >
- < xsd:attribute name =" InterfaceStatus " use =" required " >
- < xsd:simpleType >
- < xsd:restriction base =" xsd:NMTOKEN " >
  < xsd:enumeration value =" Up " />
  < xsd:enumeration value =" Down " />
  </ xsd:restriction >
  </ xsd:simpleType >
  </ xsd:attribute >
  < xsd:attribute name =" SourceId " use =" required " type =" xsd:string " />
  < xsd:attribute name =" NetAddr " use =" required " type =" IPAddress " />
  < xsd:attribute name =" NetMask " use =" required " type =" IPAddress " />
  </ xsd:complexType >
  </ xsd:element >

Element ArgusDataStream.End
 
diagram
description
attributes count  
uses Does not reference other elements.
 
used by ArgusDataStream,
content sequence (default)
 
Attribute Datatype Use Values Default Comments
count { xsd:string } required
 
source
- < xsd:element name =" ArgusDataStream.End " >
- < xsd:complexType >
  < xsd:attribute name =" count " use =" required " type =" xsd:string " />
  </ xsd:complexType >
  </ xsd:element >

Element ArgusFlowRecord
 
diagram
description
attributes ArgusSourceId   SequenceNumber   Cause   StartDate   StartTime   StartTimeusecs   LastDate   LastTime   LastTimeusecs   Duration   TransRefNum  
uses FlowEncaps ? , MACAddrs ? , Flow, IPAddrNames ? , FlowAttrs ? , ExtFlow ? , Metrics, ArgusUserData ? , ArgusTimeStats ?
 
used by ArgusDataStream,
substitution hierarchy ArgusFlowRecord
content sequence
 
Attribute Datatype Use Values Default Comments
ArgusSourceId { xsd:string } required
SequenceNumber { xsd:unsignedInt } required
Cause { } {} required possible values: Start | Status | Stop | Shutdown | Timeout | Error | Unknown
StartDate { xsd:date } required
StartTime { xsd:time } required
StartTimeusecs { xsd:int } required
LastDate { xsd:date } required
LastTime { xsd:time } required
LastTimeusecs { xsd:int } required
Duration { xsd:float } required
TransRefNum { xsd:unsignedInt } required
 
source
- < xsd:element name =" ArgusFlowRecord " >
- < xsd:complexType >
- < xsd:sequence >
  < xsd:element ref =" FlowEncaps " minOccurs =" 0 " />
  < xsd:element ref =" MACAddrs " minOccurs =" 0 " />
  < xsd:element ref =" Flow " />
  < xsd:element ref =" IPAddrNames " minOccurs =" 0 " />
  < xsd:element ref =" FlowAttrs " minOccurs =" 0 " />
  < xsd:element ref =" ExtFlow " minOccurs =" 0 " />
  < xsd:element ref =" Metrics " />
  < xsd:element ref =" ArgusUserData " minOccurs =" 0 " />
  < xsd:element ref =" ArgusTimeStats " minOccurs =" 0 " />
  </ xsd:sequence >
  < xsd:attribute name =" ArgusSourceId " use =" required " type =" xsd:string " />
  < xsd:attribute name =" SequenceNumber " use =" required " type =" xsd:unsignedInt " />
- < xsd:attribute name =" Cause " use =" required " >
- < xsd:simpleType >
- < xsd:restriction base =" xsd:NMTOKEN " >
  < xsd:enumeration value =" Start " />
  < xsd:enumeration value =" Status " />
  < xsd:enumeration value =" Stop " />
  < xsd:enumeration value =" Shutdown " />
  < xsd:enumeration value =" Timeout " />
  < xsd:enumeration value =" Error " />
  < xsd:enumeration value =" Unknown " />
  </ xsd:restriction >
  </ xsd:simpleType >
  </ xsd:attribute >
  < xsd:attribute name =" StartDate " use =" required " type =" xsd:date " />
  < xsd:attribute name =" StartTime " use =" required " type =" xsd:time " />
  < xsd:attribute name =" StartTimeusecs " use =" required " type =" xsd:int " />
  < xsd:attribute name =" LastDate " use =" required " type =" xsd:date " />
  < xsd:attribute name =" LastTime " use =" required " type =" xsd:time " />
  < xsd:attribute name =" LastTimeusecs " use =" required " type =" xsd:int " />
  < xsd:attribute name =" Duration " use =" required " type =" xsd:float " />
  < xsd:attribute name =" TransRefNum " use =" required " type =" xsd:unsignedInt " />
  </ xsd:complexType >
  </ xsd:element >

Element ArgusManagementRecord
 
diagram
description
attributes
uses Does not reference other elements.
 
used by ArgusDataStream,
content sequence (default)
 
source
- < xsd:element name =" ArgusManagementRecord " >
  < xsd:complexType />
  </ xsd:element >

Element ArgusTimeStats
 
diagram
description
attributes
uses SrcActive ? , SrcIdle ? , DstActive ? , DstIdle ?
 
used by ArgusFlowRecord,
content sequence
 
source
- < xsd:element name =" ArgusTimeStats " >
- < xsd:complexType >
- < xsd:sequence >
  < xsd:element ref =" SrcActive " minOccurs =" 0 " />
  < xsd:element ref =" SrcIdle " minOccurs =" 0 " />
  < xsd:element ref =" DstActive " minOccurs =" 0 " />
  < xsd:element ref =" DstIdle " minOccurs =" 0 " />
  </ xsd:sequence >
  </ xsd:complexType >
  </ xsd:element >

Element ArgusUserData
 
diagram
description
attributes
uses SrcData ? , DstData ?
 
used by ArgusFlowRecord,
content sequence
 
source
- < xsd:element name =" ArgusUserData " >
- < xsd:complexType >
- < xsd:sequence >
  < xsd:element ref =" SrcData " minOccurs =" 0 " />
  < xsd:element ref =" DstData " minOccurs =" 0 " />
  </ xsd:sequence >
  </ xsd:complexType >
  </ xsd:element >

Element Arp
 
diagram
description
attributes SrcArpAddr   TargetArpAaddr   ArpMacAddr  
uses Does not reference other elements.
 
used by Flow,
content sequence (default)
 
Attribute Datatype Use Values Default Comments
SrcArpAddr { IPAddress } required
TargetArpAaddr { IPAddress } required
ArpMacAddr { EthernetAddress } required
 
source
- < xsd:element name =" Arp " >
- < xsd:complexType >
  < xsd:attribute name =" SrcArpAddr " use =" required " type =" IPAddress " />
  < xsd:attribute name =" TargetArpAaddr " use =" required " type =" IPAddress " />
  < xsd:attribute name =" ArpMacAddr " use =" required " type =" EthernetAddress " />
  </ xsd:complexType >
  </ xsd:element >

Element DstActive
 
diagram
description
attributes StdDev   MinUsec   MaxUsec   MeanUsec   n  
uses Does not reference other elements.
 
used by ArgusTimeStats,
content sequence (default)
 
Attribute Datatype Use Values Default Comments
StdDev { xsd:string } required
MinUsec { xsd:unsignedInt } required
MaxUsec { xsd:unsignedInt } required
MeanUsec { xsd:unsignedInt } required
n { xsd:int } required
 
source
- < xsd:element name =" DstActive " >
- < xsd:complexType >
  < xsd:attribute name =" StdDev " use =" required " type =" xsd:string " />
  < xsd:attribute name =" MinUsec " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" MaxUsec " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" MeanUsec " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" n " use =" required " type =" xsd:int " />
  </ xsd:complexType >
  </ xsd:element >

Element DstData
 
diagram
description
attributes Data-Ascii   Length  
uses Does not reference other elements.
 
used by ArgusUserData,
content sequence (default)
 
Attribute Datatype Use Values Default Comments
Data-Ascii { xsd:string } required
Length { xsd:string } required
 
source
- < xsd:element name =" DstData " >
- < xsd:complexType >
  < xsd:attribute name =" Data-Ascii " use =" required " type =" xsd:string " />
  < xsd:attribute name =" Length " use =" required " type =" xsd:string " />
  </ xsd:complexType >
  </ xsd:element >

Element DstIdle
 
diagram
description
attributes StdDev   MinUsec   MaxUsec   MeanUsec   n  
uses Does not reference other elements.
 
used by ArgusTimeStats,
content sequence (default)
 
Attribute Datatype Use Values Default Comments
StdDev { xsd:string } required
MinUsec { xsd:unsignedInt } required
MaxUsec { xsd:unsignedInt } required
MeanUsec { xsd:unsignedInt } required
n { xsd:int } required
 
source
- < xsd:element name =" DstIdle " >
- < xsd:complexType >
  < xsd:attribute name =" StdDev " use =" required " type =" xsd:string " />
  < xsd:attribute name =" MinUsec " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" MaxUsec " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" MeanUsec " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" n " use =" required " type =" xsd:int " />
  </ xsd:complexType >
  </ xsd:element >

Element Esp
 
diagram
description
attributes Proto   SrcIPAddr   DstIPAddr   Spi  
uses Does not reference other elements.
 
used by Flow,
substitution hierarchy Esp
content sequence (default)
 
Attribute Datatype Use Values Default Comments
Proto { } {} required possible values: esp | 50
SrcIPAddr { IPAddress } optional
DstIPAddr { IPAddress } optional
Spi { xsd:unsignedShort } optional
 
source
- < xsd:element name =" Esp " >
- < xsd:complexType >
- < xsd:attribute name =" Proto " use =" required " >
- < xsd:simpleType >
- < xsd:restriction base =" xsd:NMTOKEN " >
  < xsd:enumeration value =" esp " />
  < xsd:enumeration value =" 50 " />
  </ xsd:restriction >
  </ xsd:simpleType >
  </ xsd:attribute >
  < xsd:attribute name =" SrcIPAddr " use =" optional " type =" IPAddress " />
  < xsd:attribute name =" DstIPAddr " use =" optional " type =" IPAddress " />
  < xsd:attribute name =" Spi " use =" optional " type =" xsd:unsignedShort " />
  </ xsd:complexType >
  </ xsd:element >

Element EspExtFlow
 
diagram
description
attributes SrcEspLastSeq   SrcEspDroppedPkts   DstEspLastSeq   DstEspDroppedPkts  
uses Does not reference other elements.
 
used by ExtFlow,
content sequence (default)
 
Attribute Datatype Use Values Default Comments
SrcEspLastSeq { xsd:unsignedInt } required
SrcEspDroppedPkts { xsd:unsignedInt } required
DstEspLastSeq { xsd:unsignedInt } required
DstEspDroppedPkts { xsd:unsignedInt } required
 
source
- < xsd:element name =" EspExtFlow " >
- < xsd:complexType >
  < xsd:attribute name =" SrcEspLastSeq " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" SrcEspDroppedPkts " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" DstEspLastSeq " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" DstEspDroppedPkts " use =" required " type =" xsd:unsignedInt " />
  </ xsd:complexType >
  </ xsd:element >

Element ExtFlow
 
diagram
description
attributes
uses TCPExtFlow, ICMPExtFlow, FragExtFlow, EspExtFlow
 
used by ArgusFlowRecord,
content choice
 
source
- < xsd:element name =" ExtFlow " >
- < xsd:complexType >
- < xsd:choice >
  < xsd:element ref =" TCPExtFlow " />
  < xsd:element ref =" ICMPExtFlow " />
  < xsd:element ref =" FragExtFlow " />
  < xsd:element ref =" EspExtFlow " />
  </ xsd:choice >
  </ xsd:complexType >
  </ xsd:element >

Element Flow
 
diagram
description
attributes
uses ICMP, Mac, Arp, Rarp, Esp, IP
 
used by ArgusFlowRecord,
content sequence
 
source
- < xsd:element name =" Flow " >
- < xsd:complexType >
- < xsd:sequence >
- < xsd:choice minOccurs =" 0 " maxOccurs =" unbounded " >
  < xsd:element ref =" ICMP " />
  < xsd:element ref =" Mac " />
  < xsd:element ref =" Arp " />
  < xsd:element ref =" Rarp " />
  < xsd:element ref =" Esp " />
  < xsd:element ref =" IP " />
  </ xsd:choice >
  </ xsd:sequence >
  </ xsd:complexType >
  </ xsd:element >

Element FlowAttrs
 
diagram
description
attributes Status   SrcOptions   DstOptions   SrcTOS   DstTOS   SrcTTL   DstTTL  
uses Does not reference other elements.
 
used by ArgusFlowRecord,
content sequence (default)
 
Attribute Datatype Use Values Default Comments
Status { xsd:string } optional
SrcOptions { xsd:string } optional
DstOptions { xsd:string } optional
SrcTOS { xsd:hexBinary } required
DstTOS { xsd:string } required
SrcTTL { xsd:string } required
DstTTL { xsd:string } required
 
source
- < xsd:element name =" FlowAttrs " >
- < xsd:complexType >
  < xsd:attribute name =" Status " use =" optional " type =" xsd:string " />
  < xsd:attribute name =" SrcOptions " use =" optional " type =" xsd:string " />
  < xsd:attribute name =" DstOptions " use =" optional " type =" xsd:string " />
  < xsd:attribute name =" SrcTOS " use =" required " type =" xsd:hexBinary " />
  < xsd:attribute name =" DstTOS " use =" required " type =" xsd:string " />
  < xsd:attribute name =" SrcTTL " use =" required " type =" xsd:string " />
  < xsd:attribute name =" DstTTL " use =" required " type =" xsd:string " />
  </ xsd:complexType >
  </ xsd:element >

Element FlowEncaps
 
diagram
description
attributes
uses MPLS, VLAN
 
used by ArgusFlowRecord,
content choice
 
source
- < xsd:element name =" FlowEncaps " >
- < xsd:complexType >
- < xsd:choice >
  < xsd:element ref =" MPLS " />
  < xsd:element ref =" VLAN " />
  </ xsd:choice >
  </ xsd:complexType >
  </ xsd:element >

Element FragExtFlow
 
diagram
description
attributes
uses Does not reference other elements.
 
used by ExtFlow,
content sequence (default)
 
source
- < xsd:element name =" FragExtFlow " >
  < xsd:complexType />
  </ xsd:element >

Element ICMP
 
diagram
description
attributes Proto   SrcIPAddr   IcmpType   DstIPAddr   IcmpCode   IcmpData  
uses Does not reference other elements.
 
used by Flow,
substitution hierarchy ICMP
content sequence (default)
 
Attribute Datatype Use Values Default Comments
Proto { xsd:string } required
SrcIPAddr { IPAddress } optional
IcmpType { } {} required possible values: ECR | UR | SRC | RED | AHA | ECO | RTA | RTS | TXD | PAR | TST | TSR | IRQ | IRR | MAS | MSR | SEC | ROB | TRC | DCE | MHR | WAY | IAH | MRQ | MRP | DNQ | NDP | SKP | PHO | UNK
DstIPAddr { IPAddress } optional
IcmpCode { } {} optional possible values: Net | Host | Proto | Port | NeedFrag | SrcRoute | Net Unkn | Host Unkn | Isolated | Net Prohib | Host Prohib | Tos Net | Tos Host | Filter | Host Prec | Prec Xoff | not common | normal | reassembly | in transit | option | length | pointer
IcmpData { xsd:string } optional
 
source
- < xsd:element name =" ICMP " >
- < xsd:complexType >
  < xsd:attribute name =" Proto " use =" required " type =" xsd:string " />
  < xsd:attribute name =" SrcIPAddr " use =" optional " type =" IPAddress " />
- < xsd:attribute name =" IcmpType " use =" required " >
- < xsd:simpleType >
- < xsd:restriction base =" xsd:NMTOKEN " >
  < xsd:enumeration value =" ECR " />
  < xsd:enumeration value =" UR " />
  < xsd:enumeration value =" SRC " />
  < xsd:enumeration value =" RED " />
  < xsd:enumeration value =" AHA " />
  < xsd:enumeration value =" ECO " />
  < xsd:enumeration value =" RTA " />
  < xsd:enumeration value =" RTS " />
  < xsd:enumeration value =" TXD " />
  < xsd:enumeration value =" PAR " />
  < xsd:enumeration value =" TST " />
  < xsd:enumeration value =" TSR " />
  < xsd:enumeration value =" IRQ " />
  < xsd:enumeration value =" IRR " />
  < xsd:enumeration value =" MAS " />
  < xsd:enumeration value =" MSR " />
  < xsd:enumeration value =" SEC " />
  < xsd:enumeration value =" ROB " />
  < xsd:enumeration value =" TRC " />
  < xsd:enumeration value =" DCE " />
  < xsd:enumeration value =" MHR " />
  < xsd:enumeration value =" WAY " />
  < xsd:enumeration value =" IAH " />
  < xsd:enumeration value =" MRQ " />
  < xsd:enumeration value =" MRP " />
  < xsd:enumeration value =" DNQ " />
  < xsd:enumeration value =" NDP " />
  < xsd:enumeration value =" SKP " />
  < xsd:enumeration value =" PHO " />
  < xsd:enumeration value =" UNK " />
  </ xsd:restriction >
  </ xsd:simpleType >
  </ xsd:attribute >
  < xsd:attribute name =" DstIPAddr " use =" optional " type =" IPAddress " />
- < xsd:attribute name =" IcmpCode " use =" optional " >
- < xsd:simpleType >
- < xsd:restriction base =" xsd:NMTOKEN " >
  < xsd:enumeration value =" Net " />
  < xsd:enumeration value =" Host " />
  < xsd:enumeration value =" Proto " />
  < xsd:enumeration value =" Port " />
  < xsd:enumeration value =" NeedFrag " />
  < xsd:enumeration value =" SrcRoute " />
  < xsd:enumeration value =" Net Unkn " />
  < xsd:enumeration value =" Host Unkn " />
  < xsd:enumeration value =" Isolated " />
  < xsd:enumeration value =" Net Prohib " />
  < xsd:enumeration value =" Host Prohib " />
  < xsd:enumeration value =" Tos Net " />
  < xsd:enumeration value =" Tos Host " />
  < xsd:enumeration value =" Filter " />
  < xsd:enumeration value =" Host Prec " />
  < xsd:enumeration value =" Prec Xoff " />
  < xsd:enumeration value =" not common " />
  < xsd:enumeration value =" normal " />
  < xsd:enumeration value =" reassembly " />
  < xsd:enumeration value =" in transit " />
  < xsd:enumeration value =" option " />
  < xsd:enumeration value =" length " />
  < xsd:enumeration value =" pointer " />
  </ xsd:restriction >
  </ xsd:simpleType >
  </ xsd:attribute >
  < xsd:attribute name =" IcmpData " use =" optional " type =" xsd:string " />
  </ xsd:complexType >
  </ xsd:element >

Element ICMPExtFlow
 
diagram
description
attributes
uses Does not reference other elements.
 
used by ExtFlow,
content sequence (default)
 
source
- < xsd:element name =" ICMPExtFlow " >
  < xsd:complexType />
  </ xsd:element >

Element IP
 
diagram
description
attributes Proto   SrcIPAddr   Dport   Sport   DstIPAddr   IpId  
uses Does not reference other elements.
 
used by Flow,
content sequence (default)
 
Attribute Datatype Use Values Default Comments
Proto { xsd:string } optional
SrcIPAddr { IPAddress } optional
Dport { xsd:unsignedShort } optional
Sport { xsd:unsignedShort } optional
DstIPAddr { IPAddress } optional
IpId { xsd:hexBinary } optional
 
source
- < xsd:element name =" IP " >
- < xsd:complexType >
  < xsd:attribute name =" Proto " use =" optional " type =" xsd:string " />
  < xsd:attribute name =" SrcIPAddr " use =" optional " type =" IPAddress " />
  < xsd:attribute name =" Dport " use =" optional " type =" xsd:unsignedShort " />
  < xsd:attribute name =" Sport " use =" optional " type =" xsd:unsignedShort " />
  < xsd:attribute name =" DstIPAddr " use =" optional " type =" IPAddress " />
  < xsd:attribute name =" IpId " use =" optional " type =" xsd:hexBinary " />
  </ xsd:complexType >
  </ xsd:element >

Element IPAddrNames
 
diagram
description
attributes SrcName   DstName   TargetName  
uses Does not reference other elements.
 
used by ArgusFlowRecord,
content sequence (default)
 
Attribute Datatype Use Values Default Comments
SrcName { xsd:string } optional
DstName { xsd:string } optional
TargetName { xsd:string } optional
 
source
- < xsd:element name =" IPAddrNames " >
- < xsd:complexType >
  < xsd:attribute name =" SrcName " use =" optional " type =" xsd:string " />
  < xsd:attribute name =" DstName " use =" optional " type =" xsd:string " />
  < xsd:attribute name =" TargetName " use =" optional " type =" xsd:string " />
  </ xsd:complexType >
  </ xsd:element >

Element Mac
 
diagram
description
attributes SrcMacAddr   DstMacAddr   NetProto   Ssap   Dsap  
uses Does not reference other elements.
 
used by Flow,
content sequence (default)
 
Attribute Datatype Use Values Default Comments
SrcMacAddr { EthernetAddress } optional
DstMacAddr { EthernetAddress } optional
NetProto { xsd:string } optional
Ssap { xsd:string } optional
Dsap { xsd:string } optional
 
source
- < xsd:element name =" Mac " >
- < xsd:complexType >
  < xsd:attribute name =" SrcMacAddr " use =" optional " type =" EthernetAddress " />
  < xsd:attribute name =" DstMacAddr " use =" optional " type =" EthernetAddress " />
  < xsd:attribute name =" NetProto " use =" optional " type =" xsd:string " />
  < xsd:attribute name =" Ssap " use =" optional " type =" xsd:string " />
  < xsd:attribute name =" Dsap " use =" optional " type =" xsd:string " />
  </ xsd:complexType >
  </ xsd:element >

Element MACAddrs
 
diagram
description
attributes Status   SrcAddr   DstAddr  
uses Does not reference other elements.
 
used by ArgusFlowRecord,
content sequence (default)
 
Attribute Datatype Use Values Default Comments
Status { xsd:string } optional
SrcAddr { EthernetAddress } required
DstAddr { EthernetAddress } required
 
source
- < xsd:element name =" MACAddrs " >
- < xsd:complexType >
  < xsd:attribute name =" Status " use =" optional " type =" xsd:string " />
  < xsd:attribute name =" SrcAddr " use =" required " type =" EthernetAddress " />
  < xsd:attribute name =" DstAddr " use =" required " type =" EthernetAddress " />
  </ xsd:complexType >
  </ xsd:element >

Element Metrics
 
diagram
description
attributes SrcCount   DstCount   SrcBytes   DstBytes   SrcAppBytes   DstAppBytes  
uses Does not reference other elements.
 
used by ArgusFlowRecord,
content sequence (default)
 
Attribute Datatype Use Values Default Comments
SrcCount { xsd:unsignedInt } required
DstCount { xsd:unsignedInt } required
SrcBytes { xsd:unsignedInt } required
DstBytes { xsd:unsignedInt } required
SrcAppBytes { xsd:unsignedInt } required
DstAppBytes { xsd:unsignedInt } required
 
source
- < xsd:element name =" Metrics " >
- < xsd:complexType >
  < xsd:attribute name =" SrcCount " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" DstCount " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" SrcBytes " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" DstBytes " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" SrcAppBytes " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" DstAppBytes " use =" required " type =" xsd:unsignedInt " />
  </ xsd:complexType >
  </ xsd:element >

Element MPLS
 
diagram
description
attributes SrcLabel   DstLabel  
uses Does not reference other elements.
 
used by FlowEncaps,
content sequence (default)
 
Attribute Datatype Use Values Default Comments
SrcLabel { xsd:hexBinary } optional
DstLabel { xsd:hexBinary } optional
 
source
- < xsd:element name =" MPLS " >
- < xsd:complexType >
  < xsd:attribute name =" SrcLabel " use =" optional " type =" xsd:hexBinary " />
  < xsd:attribute name =" DstLabel " use =" optional " type =" xsd:hexBinary " />
  </ xsd:complexType >
  </ xsd:element >

Element Rarp
 
diagram
description
attributes
uses Does not reference other elements.
 
used by Flow,
content sequence (default)
 
source
- < xsd:element name =" Rarp " >
  < xsd:complexType />
  </ xsd:element >

Element SrcActive
 
diagram
description
attributes StdDev   MinUsec   MaxUsec   MeanUsec   n  
uses Does not reference other elements.
 
used by ArgusTimeStats,
content sequence (default)
 
Attribute Datatype Use Values Default Comments
StdDev { xsd:string } required
MinUsec { xsd:unsignedInt } required
MaxUsec { xsd:unsignedInt } required
MeanUsec { xsd:unsignedInt } required
n { xsd:int } required
 
source
- < xsd:element name =" SrcActive " >
- < xsd:complexType >
  < xsd:attribute name =" StdDev " use =" required " type =" xsd:string " />
  < xsd:attribute name =" MinUsec " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" MaxUsec " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" MeanUsec " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" n " use =" required " type =" xsd:int " />
  </ xsd:complexType >
  </ xsd:element >

Element SrcData
 
diagram
description
attributes Data-Ascii   Length  
uses Does not reference other elements.
 
used by ArgusUserData,
content sequence (default)
 
Attribute Datatype Use Values Default Comments
Data-Ascii { xsd:string } required
Length { xsd:string } required
 
source
- < xsd:element name =" SrcData " >
- < xsd:complexType >
  < xsd:attribute name =" Data-Ascii " use =" required " type =" xsd:string " />
  < xsd:attribute name =" Length " use =" required " type =" xsd:string " />
  </ xsd:complexType >
  </ xsd:element >

Element SrcIdle
 
diagram
description
attributes StdDev   MinUsec   MaxUsec   MeanUsec   n  
uses Does not reference other elements.
 
used by ArgusTimeStats,
content sequence (default)
 
Attribute Datatype Use Values Default Comments
StdDev { xsd:string } required
MinUsec { xsd:unsignedInt } required
MaxUsec { xsd:unsignedInt } required
MeanUsec { xsd:unsignedInt } required
n { xsd:int } required
 
source
- < xsd:element name =" SrcIdle " >
- < xsd:complexType >
  < xsd:attribute name =" StdDev " use =" required " type =" xsd:string " />
  < xsd:attribute name =" MinUsec " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" MaxUsec " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" MeanUsec " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" n " use =" required " type =" xsd:int " />
  </ xsd:complexType >
  </ xsd:element >

Element TCPExtFlow
 
diagram
description
attributes TCPState   TCPOptions   AckDatauSecs   SynAckuSecs  
uses TCPExtMetrics
 
used by ExtFlow,
content sequence
 
Attribute Datatype Use Values Default Comments
TCPState { xsd:string } required
TCPOptions { xsd:string } required
AckDatauSecs { xsd:unsignedInt } required
SynAckuSecs { xsd:unsignedInt } required
 
source
- < xsd:element name =" TCPExtFlow " >
- < xsd:complexType >
- < xsd:sequence >
  < xsd:element ref =" TCPExtMetrics " />
  </ xsd:sequence >
  < xsd:attribute name =" TCPState " use =" required " type =" xsd:string " />
  < xsd:attribute name =" TCPOptions " use =" required " type =" xsd:string " />
  < xsd:attribute name =" AckDatauSecs " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" SynAckuSecs " use =" required " type =" xsd:unsignedInt " />
  </ xsd:complexType >
  </ xsd:element >

Element TCPExtMetrics
 
diagram
description
attributes DstTCPRetrans   DstTCPBytes   SrcTCPRetrans   DstTCPFlags   DstTCPAckBytes   DstTCPWin   DstTCPSeqBase   SrcTCPBytes   SrcTCPSeqBase   SrcTCPFlags   SrcTCPWin   SrcTCPAckBytes  
uses Does not reference other elements.
 
used by TCPExtFlow,
content sequence (default)
 
Attribute Datatype Use Values Default Comments
DstTCPRetrans { xsd:unsignedInt } required
DstTCPBytes { xsd:unsignedInt } required
SrcTCPRetrans { xsd:unsignedInt } required
DstTCPFlags { xsd:string } required
DstTCPAckBytes { xsd:unsignedInt } required
DstTCPWin { xsd:unsignedInt } required
DstTCPSeqBase { xsd:unsignedInt } required
SrcTCPBytes { xsd:unsignedInt } required
SrcTCPSeqBase { xsd:unsignedInt } required
SrcTCPFlags { xsd:string } required
SrcTCPWin { xsd:unsignedInt } required
SrcTCPAckBytes { xsd:unsignedInt } required
 
source
- < xsd:element name =" TCPExtMetrics " >
- < xsd:complexType >
  < xsd:attribute name =" DstTCPRetrans " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" DstTCPBytes " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" SrcTCPRetrans " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" DstTCPFlags " use =" required " type =" xsd:string " />
  < xsd:attribute name =" DstTCPAckBytes " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" DstTCPWin " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" DstTCPSeqBase " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" SrcTCPBytes " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" SrcTCPSeqBase " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" SrcTCPFlags " use =" required " type =" xsd:string " />
  < xsd:attribute name =" SrcTCPWin " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" SrcTCPAckBytes " use =" required " type =" xsd:unsignedInt " />
  </ xsd:complexType >
  </ xsd:element >

Element VLAN
 
diagram
description
attributes Type   SrcVid   DstVid  
uses Does not reference other elements.
 
used by FlowEncaps,
substitution hierarchy VLAN
content sequence (default)
 
Attribute Datatype Use Values Default Comments
Type { } {} required possible values: 802.1Q
SrcVid { xsd:hexBinary } optional
DstVid { xsd:hexBinary } optional
 
source
- < xsd:element name =" VLAN " >
- < xsd:complexType >
- < xsd:attribute name =" Type " use =" required " >
- < xsd:simpleType >
- < xsd:restriction base =" xsd:NMTOKEN " >
  < xsd:enumeration value =" 802.1Q " />
  </ xsd:restriction >
  </ xsd:simpleType >
  </ xsd:attribute >
  < xsd:attribute name =" SrcVid " use =" optional " type =" xsd:hexBinary " />
  < xsd:attribute name =" DstVid " use =" optional " type =" xsd:hexBinary " />
  </ xsd:complexType >
  </ xsd:element >

DataType definitions

Datatype EthernetAddress   defined by restriction
 
dt base xsd:string
pattern (Broadcast|(([0-9a-fA-F]?[0-9a-fA-F]:){5}[0-9a-fA-F]?[0-9a-fA-F]))

Datatype IPAddress   defined by restriction
 
dt base xsd:string
pattern ((1?[0-9]?[0-9]|2[0-4][0-9]|25[0-5])\.){3}(1?[0-9]?[0-9]|2[0-4][0-9]|25[0-5])

Original Schema Source

<!-- 
Generated by XML Authority. Conforms to w3c http://www.w3.org/2001/XMLSchema
   -->
- < xsd:schema >
- < xsd:element name =" ArgusDataStream " >
- < xsd:complexType >
- < xsd:sequence >
  < xsd:element ref =" ArgusFlowRecord " minOccurs =" 0 " maxOccurs =" unbounded " />
  < xsd:element ref =" ArgusManagementRecord " minOccurs =" 0 " maxOccurs =" unbounded " />
  < xsd:element ref =" ArgusDataStream.End " />
  </ xsd:sequence >
  < xsd:attribute name =" BeginDate " use =" required " type =" xsd:date " />
  < xsd:attribute name =" BeginTime " use =" required " type =" xsd:time " />
  < xsd:attribute name =" BeginTimeusec " use =" required " type =" xsd:int " />
  < xsd:attribute name =" CurrentDate " use =" required " type =" xsd:date " />
  < xsd:attribute name =" CurrentTime " use =" required " type =" xsd:time " />
  < xsd:attribute name =" CurrentTimeusec " use =" required " type =" xsd:int " />
- < xsd:attribute name =" MajorVersion " use =" required " >
- < xsd:simpleType >
- < xsd:restriction base =" xsd:unsignedByte " >
  < xsd:minInclusive value =" 2 " />
  </ xsd:restriction >
  </ xsd:simpleType >
  </ xsd:attribute >
  < xsd:attribute name =" MinorVersion " use =" required " type =" xsd:unsignedByte " />
- < xsd:attribute name =" InterfaceType " use =" required " >
- < xsd:simpleType >
- < xsd:restriction base =" xsd:NMTOKEN " >
  < xsd:enumeration value =" DLT_NULL " />
  < xsd:enumeration value =" DLT_EN10MB " />
  < xsd:enumeration value =" DLT_EN3MB " />
  < xsd:enumeration value =" DLT_AX25 " />
  < xsd:enumeration value =" DLT_PRONET " />
  < xsd:enumeration value =" DLT_CHAOS " />
  < xsd:enumeration value =" DLT_IEEE802 " />
  < xsd:enumeration value =" DLT_ARCNET " />
  < xsd:enumeration value =" DLT_SLIP " />
  < xsd:enumeration value =" DLT_PPP " />
  < xsd:enumeration value =" DLT_FDDI " />
  < xsd:enumeration value =" DLT_ATM_RFC1483 " />
  < xsd:enumeration value =" DLT_RAW " />
  < xsd:enumeration value =" DLT_SLIP_BSDOS " />
  < xsd:enumeration value =" DLT_PPP_BSDOS " />
  < xsd:enumeration value =" DLT_ATM_CLIP " />
  < xsd:enumeration value =" DLT_PPP_SERIAL " />
  < xsd:enumeration value =" DLT_C_HDLC " />
  < xsd:enumeration value =" DLT_IEE802_11 " />
  </ xsd:restriction >
  </ xsd:simpleType >
  </ xsd:attribute >
- < xsd:attribute name =" InterfaceStatus " use =" required " >
- < xsd:simpleType >
- < xsd:restriction base =" xsd:NMTOKEN " >
  < xsd:enumeration value =" Up " />
  < xsd:enumeration value =" Down " />
  </ xsd:restriction >
  </ xsd:simpleType >
  </ xsd:attribute >
  < xsd:attribute name =" SourceId " use =" required " type =" xsd:string " />
  < xsd:attribute name =" NetAddr " use =" required " type =" IPAddress " />
  < xsd:attribute name =" NetMask " use =" required " type =" IPAddress " />
  </ xsd:complexType >
  </ xsd:element >
- < xsd:element name =" ArgusFlowRecord " >
- < xsd:complexType >
- < xsd:sequence >
  < xsd:element ref =" FlowEncaps " minOccurs =" 0 " />
  < xsd:element ref =" MACAddrs " minOccurs =" 0 " />
  < xsd:element ref =" Flow " />
  < xsd:element ref =" IPAddrNames " minOccurs =" 0 " />
  < xsd:element ref =" FlowAttrs " minOccurs =" 0 " />
  < xsd:element ref =" ExtFlow " minOccurs =" 0 " />
  < xsd:element ref =" Metrics " />
  < xsd:element ref =" ArgusUserData " minOccurs =" 0 " />
  < xsd:element ref =" ArgusTimeStats " minOccurs =" 0 " />
  </ xsd:sequence >
  < xsd:attribute name =" ArgusSourceId " use =" required " type =" xsd:string " />
  < xsd:attribute name =" SequenceNumber " use =" required " type =" xsd:unsignedInt " />
- < xsd:attribute name =" Cause " use =" required " >
- < xsd:simpleType >
- < xsd:restriction base =" xsd:NMTOKEN " >
  < xsd:enumeration value =" Start " />
  < xsd:enumeration value =" Status " />
  < xsd:enumeration value =" Stop " />
  < xsd:enumeration value =" Shutdown " />
  < xsd:enumeration value =" Timeout " />
  < xsd:enumeration value =" Error " />
  < xsd:enumeration value =" Unknown " />
  </ xsd:restriction >
  </ xsd:simpleType >
  </ xsd:attribute >
  < xsd:attribute name =" StartDate " use =" required " type =" xsd:date " />
  < xsd:attribute name =" StartTime " use =" required " type =" xsd:time " />
  < xsd:attribute name =" StartTimeusecs " use =" required " type =" xsd:int " />
  < xsd:attribute name =" LastDate " use =" required " type =" xsd:date " />
  < xsd:attribute name =" LastTime " use =" required " type =" xsd:time " />
  < xsd:attribute name =" LastTimeusecs " use =" required " type =" xsd:int " />
  < xsd:attribute name =" Duration " use =" required " type =" xsd:float " />
  < xsd:attribute name =" TransRefNum " use =" required " type =" xsd:unsignedInt " />
  </ xsd:complexType >
  </ xsd:element >
- < xsd:element name =" ArgusManagementRecord " >
  < xsd:complexType />
  </ xsd:element >
- < xsd:element name =" FlowEncaps " >
- < xsd:complexType >
- < xsd:choice >
  < xsd:element ref =" MPLS " />
  < xsd:element ref =" VLAN " />
  </ xsd:choice >
  </ xsd:complexType >
  </ xsd:element >
- < xsd:element name =" MPLS " >
- < xsd:complexType >
  < xsd:attribute name =" SrcLabel " use =" optional " type =" xsd:hexBinary " />
  < xsd:attribute name =" DstLabel " use =" optional " type =" xsd:hexBinary " />
  </ xsd:complexType >
  </ xsd:element >
- < xsd:element name =" VLAN " >
- < xsd:complexType >
- < xsd:attribute name =" Type " use =" required " >
- < xsd:simpleType >
- < xsd:restriction base =" xsd:NMTOKEN " >
  < xsd:enumeration value =" 802.1Q " />
  </ xsd:restriction >
  </ xsd:simpleType >
  </ xsd:attribute >
  < xsd:attribute name =" SrcVid " use =" optional " type =" xsd:hexBinary " />
  < xsd:attribute name =" DstVid " use =" optional " type =" xsd:hexBinary " />
  </ xsd:complexType >
  </ xsd:element >
- < xsd:element name =" Flow " >
- < xsd:complexType >
- < xsd:sequence >
- < xsd:choice minOccurs =" 0 " maxOccurs =" unbounded " >
  < xsd:element ref =" ICMP " />
  < xsd:element ref =" Mac " />
  < xsd:element ref =" Arp " />
  < xsd:element ref =" Rarp " />
  < xsd:element ref =" Esp " />
  < xsd:element ref =" IP " />
  </ xsd:choice >
  </ xsd:sequence >
  </ xsd:complexType >
  </ xsd:element >
- < xsd:element name =" IP " >
- < xsd:complexType >
  < xsd:attribute name =" Proto " use =" optional " type =" xsd:string " />
  < xsd:attribute name =" SrcIPAddr " use =" optional " type =" IPAddress " />
  < xsd:attribute name =" Dport " use =" optional " type =" xsd:unsignedShort " />
  < xsd:attribute name =" Sport " use =" optional " type =" xsd:unsignedShort " />
  < xsd:attribute name =" DstIPAddr " use =" optional " type =" IPAddress " />
  < xsd:attribute name =" IpId " use =" optional " type =" xsd:hexBinary " />
  </ xsd:complexType >
  </ xsd:element >
- < xsd:element name =" Esp " >
- < xsd:complexType >
- < xsd:attribute name =" Proto " use =" required " >
- < xsd:simpleType >
- < xsd:restriction base =" xsd:NMTOKEN " >
  < xsd:enumeration value =" esp " />
  < xsd:enumeration value =" 50 " />
  </ xsd:restriction >
  </ xsd:simpleType >
  </ xsd:attribute >
  < xsd:attribute name =" SrcIPAddr " use =" optional " type =" IPAddress " />
  < xsd:attribute name =" DstIPAddr " use =" optional " type =" IPAddress " />
  < xsd:attribute name =" Spi " use =" optional " type =" xsd:unsignedShort " />
  </ xsd:complexType >
  </ xsd:element >
- < xsd:element name =" ICMP " >
- < xsd:complexType >
  < xsd:attribute name =" Proto " use =" required " type =" xsd:string " />
  < xsd:attribute name =" SrcIPAddr " use =" optional " type =" IPAddress " />
- < xsd:attribute name =" IcmpType " use =" required " >
- < xsd:simpleType >
- < xsd:restriction base =" xsd:NMTOKEN " >
  < xsd:enumeration value =" ECR " />
  < xsd:enumeration value =" UR " />
  < xsd:enumeration value =" SRC " />
  < xsd:enumeration value =" RED " />
  < xsd:enumeration value =" AHA " />
  < xsd:enumeration value =" ECO " />
  < xsd:enumeration value =" RTA " />
  < xsd:enumeration value =" RTS " />
  < xsd:enumeration value =" TXD " />
  < xsd:enumeration value =" PAR " />
  < xsd:enumeration value =" TST " />
  < xsd:enumeration value =" TSR " />
  < xsd:enumeration value =" IRQ " />
  < xsd:enumeration value =" IRR " />
  < xsd:enumeration value =" MAS " />
  < xsd:enumeration value =" MSR " />
  < xsd:enumeration value =" SEC " />
  < xsd:enumeration value =" ROB " />
  < xsd:enumeration value =" TRC " />
  < xsd:enumeration value =" DCE " />
  < xsd:enumeration value =" MHR " />
  < xsd:enumeration value =" WAY " />
  < xsd:enumeration value =" IAH " />
  < xsd:enumeration value =" MRQ " />
  < xsd:enumeration value =" MRP " />
  < xsd:enumeration value =" DNQ " />
  < xsd:enumeration value =" NDP " />
  < xsd:enumeration value =" SKP " />
  < xsd:enumeration value =" PHO " />
  < xsd:enumeration value =" UNK " />
  </ xsd:restriction >
  </ xsd:simpleType >
  </ xsd:attribute >
  < xsd:attribute name =" DstIPAddr " use =" optional " type =" IPAddress " />
- < xsd:attribute name =" IcmpCode " use =" optional " >
- < xsd:simpleType >
- < xsd:restriction base =" xsd:NMTOKEN " >
  < xsd:enumeration value =" Net " />
  < xsd:enumeration value =" Host " />
  < xsd:enumeration value =" Proto " />
  < xsd:enumeration value =" Port " />
  < xsd:enumeration value =" NeedFrag " />
  < xsd:enumeration value =" SrcRoute " />
  < xsd:enumeration value =" Net Unkn " />
  < xsd:enumeration value =" Host Unkn " />
  < xsd:enumeration value =" Isolated " />
  < xsd:enumeration value =" Net Prohib " />
  < xsd:enumeration value =" Host Prohib " />
  < xsd:enumeration value =" Tos Net " />
  < xsd:enumeration value =" Tos Host " />
  < xsd:enumeration value =" Filter " />
  < xsd:enumeration value =" Host Prec " />
  < xsd:enumeration value =" Prec Xoff " />
  < xsd:enumeration value =" not common " />
  < xsd:enumeration value =" normal " />
  < xsd:enumeration value =" reassembly " />
  < xsd:enumeration value =" in transit " />
  < xsd:enumeration value =" option " />
  < xsd:enumeration value =" length " />
  < xsd:enumeration value =" pointer " />
  </ xsd:restriction >
  </ xsd:simpleType >
  </ xsd:attribute >
  < xsd:attribute name =" IcmpData " use =" optional " type =" xsd:string " />
  </ xsd:complexType >
  </ xsd:element >
- < xsd:element name =" Arp " >
- < xsd:complexType >
  < xsd:attribute name =" SrcArpAddr " use =" required " type =" IPAddress " />
  < xsd:attribute name =" TargetArpAaddr " use =" required " type =" IPAddress " />
  < xsd:attribute name =" ArpMacAddr " use =" required " type =" EthernetAddress " />
  </ xsd:complexType >
  </ xsd:element >
- < xsd:element name =" Rarp " >
  < xsd:complexType />
  </ xsd:element >
- < xsd:element name =" Mac " >
- < xsd:complexType >
  < xsd:attribute name =" SrcMacAddr " use =" optional " type =" EthernetAddress " />
  < xsd:attribute name =" DstMacAddr " use =" optional " type =" EthernetAddress " />
  < xsd:attribute name =" NetProto " use =" optional " type =" xsd:string " />
  < xsd:attribute name =" Ssap " use =" optional " type =" xsd:string " />
  < xsd:attribute name =" Dsap " use =" optional " type =" xsd:string " />
  </ xsd:complexType >
  </ xsd:element >
- < xsd:element name =" FlowAttrs " >
- < xsd:complexType >
  < xsd:attribute name =" Status " use =" optional " type =" xsd:string " />
  < xsd:attribute name =" SrcOptions " use =" optional " type =" xsd:string " />
  < xsd:attribute name =" DstOptions " use =" optional " type =" xsd:string " />
  < xsd:attribute name =" SrcTOS " use =" required " type =" xsd:hexBinary " />
  < xsd:attribute name =" DstTOS " use =" required " type =" xsd:string " />
  < xsd:attribute name =" SrcTTL " use =" required " type =" xsd:string " />
  < xsd:attribute name =" DstTTL " use =" required " type =" xsd:string " />
  </ xsd:complexType >
  </ xsd:element >
- < xsd:element name =" MACAddrs " >
- < xsd:complexType >
  < xsd:attribute name =" Status " use =" optional " type =" xsd:string " />
  < xsd:attribute name =" SrcAddr " use =" required " type =" EthernetAddress " />
  < xsd:attribute name =" DstAddr " use =" required " type =" EthernetAddress " />
  </ xsd:complexType >
  </ xsd:element >
- < xsd:element name =" ExtFlow " >
- < xsd:complexType >
- < xsd:choice >
  < xsd:element ref =" TCPExtFlow " />
  < xsd:element ref =" ICMPExtFlow " />
  < xsd:element ref =" FragExtFlow " />
  < xsd:element ref =" EspExtFlow " />
  </ xsd:choice >
  </ xsd:complexType >
  </ xsd:element >
- < xsd:element name =" TCPExtFlow " >
- < xsd:complexType >
- < xsd:sequence >
  < xsd:element ref =" TCPExtMetrics " />
  </ xsd:sequence >
  < xsd:attribute name =" TCPState " use =" required " type =" xsd:string " />
  < xsd:attribute name =" TCPOptions " use =" required " type =" xsd:string " />
  < xsd:attribute name =" AckDatauSecs " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" SynAckuSecs " use =" required " type =" xsd:unsignedInt " />
  </ xsd:complexType >
  </ xsd:element >
- < xsd:element name =" ICMPExtFlow " >
  < xsd:complexType />
  </ xsd:element >
- < xsd:element name =" FragExtFlow " >
  < xsd:complexType />
  </ xsd:element >
- < xsd:element name =" EspExtFlow " >
- < xsd:complexType >
  < xsd:attribute name =" SrcEspLastSeq " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" SrcEspDroppedPkts " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" DstEspLastSeq " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" DstEspDroppedPkts " use =" required " type =" xsd:unsignedInt " />
  </ xsd:complexType >
  </ xsd:element >
- < xsd:element name =" TCPExtMetrics " >
- < xsd:complexType >
  < xsd:attribute name =" DstTCPRetrans " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" DstTCPBytes " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" SrcTCPRetrans " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" DstTCPFlags " use =" required " type =" xsd:string " />
  < xsd:attribute name =" DstTCPAckBytes " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" DstTCPWin " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" DstTCPSeqBase " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" SrcTCPBytes " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" SrcTCPSeqBase " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" SrcTCPFlags " use =" required " type =" xsd:string " />
  < xsd:attribute name =" SrcTCPWin " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" SrcTCPAckBytes " use =" required " type =" xsd:unsignedInt " />
  </ xsd:complexType >
  </ xsd:element >
- < xsd:element name =" Metrics " >
- < xsd:complexType >
  < xsd:attribute name =" SrcCount " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" DstCount " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" SrcBytes " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" DstBytes " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" SrcAppBytes " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" DstAppBytes " use =" required " type =" xsd:unsignedInt " />
  </ xsd:complexType >
  </ xsd:element >
- < xsd:element name =" ArgusTimeStats " >
- < xsd:complexType >
- < xsd:sequence >
  < xsd:element ref =" SrcActive " minOccurs =" 0 " />
  < xsd:element ref =" SrcIdle " minOccurs =" 0 " />
  < xsd:element ref =" DstActive " minOccurs =" 0 " />
  < xsd:element ref =" DstIdle " minOccurs =" 0 " />
  </ xsd:sequence >
  </ xsd:complexType >
  </ xsd:element >
- < xsd:element name =" SrcActive " >
- < xsd:complexType >
  < xsd:attribute name =" StdDev " use =" required " type =" xsd:string " />
  < xsd:attribute name =" MinUsec " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" MaxUsec " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" MeanUsec " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" n " use =" required " type =" xsd:int " />
  </ xsd:complexType >
  </ xsd:element >
- < xsd:element name =" DstActive " >
- < xsd:complexType >
  < xsd:attribute name =" StdDev " use =" required " type =" xsd:string " />
  < xsd:attribute name =" MinUsec " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" MaxUsec " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" MeanUsec " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" n " use =" required " type =" xsd:int " />
  </ xsd:complexType >
  </ xsd:element >
- < xsd:element name =" SrcIdle " >
- < xsd:complexType >
  < xsd:attribute name =" StdDev " use =" required " type =" xsd:string " />
  < xsd:attribute name =" MinUsec " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" MaxUsec " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" MeanUsec " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" n " use =" required " type =" xsd:int " />
  </ xsd:complexType >
  </ xsd:element >
- < xsd:element name =" DstIdle " >
- < xsd:complexType >
  < xsd:attribute name =" StdDev " use =" required " type =" xsd:string " />
  < xsd:attribute name =" MinUsec " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" MaxUsec " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" MeanUsec " use =" required " type =" xsd:unsignedInt " />
  < xsd:attribute name =" n " use =" required " type =" xsd:int " />
  </ xsd:complexType >
  </ xsd:element >
- < xsd:element name =" ArgusUserData " >
- < xsd:complexType >
- < xsd:sequence >
  < xsd:element ref =" SrcData " minOccurs =" 0 " />
  < xsd:element ref =" DstData " minOccurs =" 0 " />
  </ xsd:sequence >
  </ xsd:complexType >
  </ xsd:element >
- < xsd:element name =" SrcData " >
- < xsd:complexType >
  < xsd:attribute name =" Data-Ascii " use =" required " type =" xsd:string " />
  < xsd:attribute name =" Length " use =" required " type =" xsd:string " />
  </ xsd:complexType >
  </ xsd:element >
- < xsd:element name =" DstData " >
- < xsd:complexType >
  < xsd:attribute name =" Data-Ascii " use =" required " type =" xsd:string " />
  < xsd:attribute name =" Length " use =" required " type =" xsd:string " />
  </ xsd:complexType >
  </ xsd:element >
- < xsd:element name =" IPAddrNames " >
- < xsd:complexType >
  < xsd:attribute name =" SrcName " use =" optional " type =" xsd:string " />
  < xsd:attribute name =" DstName " use =" optional " type =" xsd:string " />
  < xsd:attribute name =" TargetName " use =" optional " type =" xsd:string " />
  </ xsd:complexType >
  </ xsd:element >
- < xsd:element name =" ArgusDataStream.End " >
- < xsd:complexType >
  < xsd:attribute name =" count " use =" required " type =" xsd:string " />
  </ xsd:complexType >
  </ xsd:element >
- < xsd:simpleType name =" IPAddress " >
- < xsd:restriction base =" xsd:string " >
  < xsd:maxLength value =" 15 " />
  < xsd:minLength value =" 7 " />
  < xsd:pattern value =" ((1?[0-9]?[0-9]|2[0-4][0-9]|25[0-5])\.){3}(1?[0-9]?[0-9]|2[0-4][0-9]|25[0-5]) " />
  </ xsd:restriction >
  </ xsd:simpleType >
- < xsd:simpleType name =" EthernetAddress " >
- < xsd:restriction base =" xsd:string " >
  < xsd:maxLength value =" 17 " />
  < xsd:minLength value =" 9 " />
  < xsd:pattern value =" (Broadcast|(([0-9a-fA-F]?[0-9a-fA-F]:){5}[0-9a-fA-F]?[0-9a-fA-F])) " />
  </ xsd:restriction >
  </ xsd:simpleType >
  </ xsd:schema >