logstash-codec-netflow icon indicating copy to clipboard operation
logstash-codec-netflow copied to clipboard

Netflow v5/v9: Incorrect time calculation for first switched and last switched (part 2)

Open ghost opened this issue 6 years ago • 0 comments

In /lib/logstash/codecs/netflow.rb the calculation of absolute timestamps for "first_switched" and "last_switched" is incorrect due to syntax error:

Ruby doesn't support --/++ operators. Unfortunately jruby doesn't even show an error; it just ignores the line.

Solution: Line 141 replace seconds-- by seconds -= 1

ghost avatar Jan 15 '19 15:01 ghost