nfdump icon indicating copy to clipboard operation
nfdump copied to clipboard

Published 20 hours ago • verified publisher icon phaag

Cloudgenix IPFIX rejected...

Open ken-adey opened this issue 3 years ago • 1 comments

Nfcapd is unable to parse Cloudgenix IPFIX flows: "Error reading netflow header: Unexpected netflow version".

This error is seen in V1.6.23 and the latest master.

Pcap provided on request.

ken-adey avatar Oct 07 '22 12:10 ken-adey

The pcap would be appreciated. Many thanks

phaag avatar Oct 11 '22 05:10 phaag

The error message can not be reproduced, however: nfdump v.1.6.23 and v.1.6.24 did not accept the records due to missing packet/byte counters. The very last v1.6.x release - nfdump-1.6.25 does accept the data and so do all v1.7.x releases as well as the master branch.

phaag avatar Oct 15 '22 11:10 phaag

Any update on that issue?

phaag avatar Dec 02 '22 14:12 phaag

This can be closed. Customer configured their exporter properly to include the missing packet/byte counts.

ken-adey avatar Dec 05 '22 13:12 ken-adey

Very good! Thanks for the feedback.

phaag avatar Dec 05 '22 19:12 phaag