logstash-codec-sflow icon indicating copy to clipboard operation
logstash-codec-sflow copied to clipboard

Feature request: MPLS support

Open jakunow opened this issue 6 years ago • 2 comments

On main page it is stated

it is able to decode Ethernet, 802.1Q VLAN, IPv4, UDP and TCP header

I've inspected decoded logs and it seems plugin is unable to analyze MPLS packets. Is there a plan to add support for it?

jakunow avatar Jul 06 '18 12:07 jakunow

Hi @jakunow on my side I didn't have any access to some sflow trame with MPLS header packet, to be able to add it I would need a network capture so I can test any future development with it. Let me know if you can provide me such a capture

ashangit avatar Jul 09 '18 12:07 ashangit

Hi @ashangit I've had a look on packet_header.rb code and I don't think implementing MPLS decoding is easy to implement. MPLS frames don't have any field that describe underlying payload and because MPLS traffic can carry multiple type of traffic it's not that straightforward to determine that payload's protocol. Without some more complex analysis it won't work.

jakunow avatar Jul 10 '18 12:07 jakunow