logstash-codec-sflow
logstash-codec-sflow copied to clipboard
Feature request: MPLS support
On main page it is stated
it is able to decode Ethernet, 802.1Q VLAN, IPv4, UDP and TCP header
I've inspected decoded logs and it seems plugin is unable to analyze MPLS packets. Is there a plan to add support for it?
Hi @jakunow on my side I didn't have any access to some sflow trame with MPLS header packet, to be able to add it I would need a network capture so I can test any future development with it. Let me know if you can provide me such a capture
Hi @ashangit I've had a look on packet_header.rb code and I don't think implementing MPLS decoding is easy to implement. MPLS frames don't have any field that describe underlying payload and because MPLS traffic can carry multiple type of traffic it's not that straightforward to determine that payload's protocol. Without some more complex analysis it won't work.