David Bar
David Bar
@akshah - following our conversation - references for encoding: For the expanded format - AFAIK this is not covered in any RFC, but is explained in the the sflow version...
Also, attaching sflow pcap in expanded and compact format. Use wireshark to see how it parses the fields, especially look at the hex output, and see that it shows which...
Example pcap of non-TCP/UDP/ICMP traffic - [sflow_protocol_50.zip](https://github.com/Edgio/vflow/files/10487075/sflow_protocol_50.zip)
As an example of a ipfix with special characters, see attached. The ApplicationName and ApplicationDesc elements have fixed-size, and so the exporter added nulls at the end of string, which...
As an example of a pcap with unknown fields, attaching here small pcap with enterprise elements in it.[](url) [ipfix_icmp.zip](https://github.com/Edgio/vflow/files/10486988/ipfix_icmp.zip)
@akshah - following our conversation - the diff tool got a bit confused because I moved things around a bit. But basically, we now first read the bytes, and then...
@akshah - any news on this? Did you look at this PR?