---
title: "General Metrics"
slug: "general-metrics"
description: "Explore Kentik's general metrics, including host traffic and application decodes, to optimize your network queries and enhance performance insights."
updated: 2025-11-21T18:29:25Z
published: 2025-11-21T18:29:25Z
---

> ## Documentation Index
> Fetch the complete documentation index at: https://kb.kentik.com/llms.txt
> Use this file to discover all available pages before exploring further.

# General Metrics

This article discusses general (i.e. flow) metrics used in Kentik queries.

> [!NOTE]
> **Notes:**
> 
> - For general metric information, see [**About Metrics**](/v1/docs/metrics-dimensions#about-metrics).
> - For non-flow metrics, see [**Non-flow Metrics**](/v1/docs/non-flow-metrics).
> - For device-specific metrics, see [**Device-specific Metrics**](/v1/docs/device-specific-metrics).
> - Filter and group-by dimensions are covered in [**Dimensions Reference**](/v1/docs/dimensions-reference) (see [**Per-flow Metrics**](/v1/docs/routing-dimensions#perflow-metrics)).
> - Metrics are used for Kentik portal query settings and the [**Query API**](/v1/docs/query-api).

## About General Metrics

In Kentik, general metrics are transmitted via flow protocols like NetFlow or sFlow and aren’t tied to specific devices. Their availability in settings like the [**Metrics Pane**](/v1/docs/metrics-settings#metrics-pane) of the Query sidebar in Data Explorer depends on the device category (Router or Host) and the specific device type (see [**Supported Device Types**](/v1/docs/network-devices#supported-device-types)).

## Metrics from All Devices

When a query includes traffic solely from data sources (see [**About Data Sources**](/v1/docs/data-source-settings#about-data-sources)) in the "Routers" category, only the following metrics are available:

| Metric in portal | Variations | Calculated as... | Derived from KDE column(s) |
| --- | --- | --- | --- |
| Bits per second | Sampled at: - Ingress and Egress - Ingress - Egress | - Average - 95th Percentile - 99th Percentile - Max - Total | in_bytes, out_bytes |
| Packets per second | Sampled at: - Ingress and Egress - Ingress - Egress | - Average - 95th Percentile - 99th Percentile - Max - Total | in_pkts, out_pkts |
| Flows per second | N.A. | - Average - 95th Percentile - 99th Percentile - Max - Total | Based on rows per KDE main table |
| Source IPs | - Unique Count - Bitrate per IP | - Average - 95th Percentile - 99th Percentile - Max - Total | inet_src_addr |
| Destination IPs | - Unique Count - Bitrate per IP | - Average - 95th Percentile - 99th Percentile - Max - Total | inet_dst_addr |
| Unique Route Prefixes | - Source - Destination | - Average - 95th Percentile - 99th Percentile - Max - Total | inet_src_route_prefix, inet_dst_route_prefix |
| Unique Ports | - Source - Destination | - Average - 95th Percentile - 99th Percentile - Max - Total | inet_src_route_prefix, inet_dst_route_prefix |
| Unique ASNs | - Source - Destination - Next Hop Destination | - Average - 95th Percentile - 99th Percentile - Max - Total | src_as, dst_as, i_dst_nexthop_as_name |
| Unique Countries | - Source - Destination | - Average - 95th Percentile - 99th Percentile - Max - Total | src_geo, dst_geo |
| Unique Regions | - Source - Destination | - Average - 95th Percentile - 99th Percentile - Max - Total | src_geo_region, dst_geo_region |
| Unique Cities | - Source - Destination | - Average - 95th Percentile - 99th Percentile - Max - Total | src_geo_city, dst_geo_city |
| Sample rate | - Max - Average | - Average - 95th Percentile - 99th Percentile - Max - Total | sample_rate |

> [!NOTE]
> **Notes:**
> 
> - The “Total” metric is available only when the chart type is set to Table or Matrix (see [**Chart Visualization Types**](/v1/docs/chart-visualization-types)).
> - Metrics labeled as "unique" are evaluated across all instances on queried devices within each individual time slice of the query's time range, but not between different time slices (see [**Table Time-slicing**](/v1/docs/kde-overview#table-timeslicing)).

## Host Traffic Metrics

When querying traffic that includes devices in the "Host" category (using Kentik’s host agent, see [**About the Universal Agent**](/v1/docs/universal-agents#about-the-universal-agent)), the data from these hosts is stored in KDE.

### Host Metrics by Protocol

The availability of a given metric varies by protocol:

| Metric in portal | TCP | HTTP | DNS | Calculated as... | Derived from KDE column(s) |
| --- | --- | --- | --- | --- | --- |
| Retransmits | - Per second - Repeated per second - Percent - Percent Repeated | - Repeated Retransmits - Retransmitted Packets Out | N.A. | - Average - Percentile (95th or 98th) - Max - Total | retransmitted_out_pkts, repeated_retransmits, both_pkts (for %) |
| Out-of-order packets | - Per second - Percent | - Per second (In) | N.A. | - Average - Percentile (95th or 98th) - Max - Total | ooorder_in_pkts, ooorder_out_pkts, both_pkts (for %) |
| Fragments | - Per second - Percent | - Per second | - Per second | - Average - Percentile (95th or 98th) - Max - Total | fragments, both_pkts (for %) |
| Zero Windows | - Count - Percent | - Per second | N.A. | - Average - Percentile (95th or 98th) - Max | zero_windows |
| Receive Window | N.A. | N.A. | N.A. | - Average - Percentile (95th or 98th) - Max | receive_window |
| Latency | - Client - Server - Application - First Payload Exchange | - Client - Server - Application - FPEX | - Application | - Average - Percentile (95th or 98th) - Max | client_nw_latency_ms, server_nw_latency_ms, appl_latency_ms, fpex_latency_ms |

> [!NOTE]
> **Note:**The “Total” metric is available only when the chart type is set to Table or Matrix (see [**Chart Visualization Types**](/v1/docs/chart-visualization-types)).

### Host Metrics Descriptions

The following descriptions apply to the host-only metrics listed in the table above:

- **Retransmits**: Packets re-sent from source to destination, applicable to reliable protocols like TCP.
  - Indicates network delivery issues affecting performance.
  - Measured per second and as a percentage of all packets sent.

> [!NOTE]
> **Note:** "Repeated" refers to packets retransmitted 3 or more times.
- **Out of order**: Packets arriving out of sequence.
  - High values suggest variability in delivery paths, impacting latency-sensitive traffic like real-time audio/video.
  - Measured per second and as a percentage of all packets sent.
- **Fragments/second**: Packets split into smaller packets for network delivery.
  - Fragmentation can increase CPU load and cause retransmits if fragments arrive out-of-order.
  - Measured per second and as a percentage of all packets sent.
- **Zero Windows**: Count of TCP receive windows with a value of zero, indicating a full buffer.
- **Receive Window**: Size of the TCP receive window.
- **Latency**: Various measures include:
  - RTT/2 client latency (derived): One-way latency from the client perspective. High values indicate network or server-side issues
  - RTT/2 server latency (derived): One-way latency from the server perspective. High values indicate network or client-side issues.
  - RTT/2 application latency (derived): Derived from request/response pairs at the application layer, indicating end-user experience latency. Effective for protocols with clear request/response pairings.
  - First Payload Exchange Latency: Measures application response time when the protocol isn't understood or can’t be decoded (e.g., HTTPS, SQL). Excludes TCP setup, starting with the first packet sent and ending with the first packet returned.

### Host Metrics KDE Columns

The following table shows the correspondence between the metrics described above and the columns of the Kentik Data Engine (KDE):

| Metric in portal | Type: value column | Derived from KDE column(s) |
| --- | --- | --- |
| Retransmits | bigint Native | retransmitted_out_pkts, repeated_retransmits, both_pkts (for %) |
| Out-of-order packets | bigint Native | ooorder_in_pkts, ooorder_out_pkts, both_pkts (for %) |
| Fragments | bigint Native | fragments, both_pkts (for %) |
| Zero Windows | bigint Native | zero_windows |
| Receive Window | bigint Native | receive_window |
| Latency | bigint Native | client_nw_latency_ms, server_nw_latency_ms, appl_latency_ms, fpex_latency_ms |

## Application Decodes Metrics

When using Kentik's software host agent for application decodes (see [**About Application Decodes**](/v1/docs/general-dimensions#about-application-decodes)), both dimensions and metrics are generated and stored in or derived from KDE columns. The metrics available for queries via the metric selector (see [**Metrics Dialog UI**](/v1/docs/metrics-settings#metrics-dialog-ui)) include:

| Metric in portal | Description | Type: value column |
| --- | --- | --- |
| Connection Name | TCP connection ID. | bigint UDR |
| Application Latency | One-way network latency derived by examining request/response pairs at the application layer. | bigint UDR |
| FPEX Latency | Elapsed time from first packet sent to first packet returned. | bigint UDR |

> [!NOTE]
> **Note:** For dimensions related to application decodes, see [**Application Decodes Dimensions**](/v1/docs/general-dimensions#application-decodes-dimensions).

#### Legacy Application Decodes Metrics

The "legacy" metrics in the table below are from older versions (<v1.3.0) of Kentik’s legacy host software agent, `kprobe`:

| Metric in portal | Description | Type: value column | KDE name(s) |
| --- | --- | --- | --- |
| Connection ID | TCP connection ID. > [!NOTE] > **Note:**Superseded by Connection Name. | bigint Native | connection_id |
| Application Latency (ms) | One-way network latency derived by examining request/response pairs at the application layer. | bigint Native | appl_latency_ms |
| First Payload Exchange Latency (ms) | Elapsed time from first packet sent to first packet returned. > [!NOTE] > **Note:**Superseded by FPEX Latency. | bigint Native | fpex_latency_ms |
