logstash-codec-sflow

logstash-codec-sflow copied to clipboard

Im trying to get elastiflow working with Brocade MLXe-4 routers, 6 or so of them. They are using MPLS.

Rob Cowart over at elastiflow investegated the error i got from the log. [WARN ][logstash.codecs.sflow ] Invalid sflow packet received (End of file reached)

With an answer:

The issue is that the sFlow flow samples include the extended_mpls_tunnel structure, which is currently not supported by the Logstash sFlow Codec

Elastiflow Issue: #459

Can this be implemented? Without it i cant parse any data into elastiflow, leaving a blank kibana :(

Here is an sflow pcap for reference and troubble shoot/implementation, sflow.zip

Regards Kim