ipt-netflow icon indicating copy to clipboard operation
ipt-netflow copied to clipboard

Published 20 hours ago • verified publisher icon aabc

Bug in field size

Open antiuser opened this issue 6 years ago • 2 comments

Hi! We are using ELK for netflow collector and we are found field size missmatch. detail here Thank you!

antiuser avatar Mar 28 '18 11:03 antiuser

Hello,

ipt-netflow sends unsigned64 filed correctly and according to Internet Standard RFC 5101. logstash-codec-netflow decodes unsigned64 field incorrectly violating standard. You should report it as bug to logstash-codec-netflow. ;-)

Similar bug report for your interest https://github.com/aabc/ipt-netflow/issues/30

aabc avatar Mar 28 '18 19:03 aabc

Oops thanks, somehow I missed this in the IPFIX compliance list I keep over at https://github.com/logstash-plugins/logstash-codec-netflow/blob/master/RFC_COMPLIANCE_IPFIX.md.

jorritfolmer avatar Mar 29 '18 06:03 jorritfolmer