netflow icon indicating copy to clipboard operation
netflow copied to clipboard

Decoder error on Mikrotik Netflow v9

Open itrack opened this issue 1 year ago • 0 comments

Hi! I only receive ipv6 packets and a lot of decoder error: EOF:

2024/07/26 23:20:58 waiting for data
2024/07/26 23:21:09 received 1340 bytes from [::]:2055
2024/07/26 23:21:09 decoder error: EOF
2024/07/26 23:21:09 [::]:2055
2024/07/26 23:21:09 waiting for data
2024/07/26 23:21:11 received 212 bytes from [::]:2055
NetFlow version 9 packet
  data set template 256, length: 192
    2 records:
      record 0:
        ipVersion: 2
        sourceIPv6Address: de8d:8202:de8d:8200::300
        sourceIPv6PrefixLength: 0
        ingressInterface: 0
        destinationIPv6Address: 892:0:e:0:b:c0a8:58c8:d32
        destinationIPv6PrefixLength: 180
        egressInterface: 3221619408
        ipNextHopIPv6Address: b01:bb0a:1401:200:18::148
        protocolIdentifier: 143
        tcpControlBits: 90
        samplingInterval: 1020617032
        samplingAlgorithm: 143
        ipClassOfService: 90
        sourceTransportPort: 15573
        destinationTransportPort: 24996
        flowLabelIPv6: 4229183531
        ipv6ExtensionHeaders: 3994040654
        flowEndSysUpTime: 3050988554
        flowStartSysUpTime: 335666701
        octetDeltaCount: 3653757197474708226
        packetDeltaCount: 16036682767669247488
        destinationMacAddress: 00:00:00:00:00:00
        sourceMacAddress: 04:00:00:00:00:00
        postDestinationMacAddress: 00:00:f1:00:00:00
        postSourceMacAddress: 0b:00:00:00:0e:0d
      record 1:
        ipVersion: 50
        sourceIPv6Address: b4c0:a14:1de:600:1bb:d00b::
        sourceIPv6PrefixLength: 0
        ingressInterface: 1048576
        destinationIPv6Address: 0:110:394e:b5da:6410:394e:b5da:64e6
        destinationIPv6PrefixLength: 56
        egressInterface: 2201076341
        ipNextHopIPv6Address: 488f:5a3c:d561:d32:b4c0:c0a8:58c8:1bb
        protocolIdentifier: 208
        tcpControlBits: 11
2024/07/26 23:21:11 waiting for data
2024/07/26 23:21:13 received 1152 bytes from [::]:2055
2024/07/26 23:21:13 decoder error: EOF

Thank you!

itrack avatar Jul 26 '24 20:07 itrack