nProbe icon indicating copy to clipboard operation
nProbe copied to clipboard

flow custom IEs are not passed properly into ntopng GUI

Open marehvi opened this issue 3 years ago • 1 comments

Export of the Checkpoint vendor specific IEs to ntopng is not working properly

Custom IEs definition: image

The probe template is set to: -T="@NTOPNG@ %CKP_VS_ID %CKP_CLUSTER_ID"

ntopng displays randomly only one field (for some flows it's CKP_VS_ID, for others it's CKP_CLUSTER_ID) and with wrong name:

image

When dumpling flows from the probe it shows the customer IEs properly, also when setting the probe in passthrough mode then ntopng displays additional flow elements as 2620:463 and 2620:467 respectively (unfortunately it also modifies the "Flow Exporter IPv4 Address" to the probe itself).

marehvi avatar Oct 19 '22 10:10 marehvi

Fixed in the current nProbe implementation

lucaderi avatar Oct 22 '22 09:10 lucaderi