-
Hi,
I was trying to test goflow on my local network (fortigate firewall). Hoping it would solve my predicament.
It's been running a few hours (admittedly while I was out so little traffic), but I'm …
-
Hello,
I have some issues with logstash Netflow codec and Cisco ASR 1000.
I am using Netflow Version 9 and have following messages in my logstash logs:
[2019-10-08T15:36:22,517][ERROR][logstash…
imuab updated
4 years ago
-
I've been benchmarking the netflow codec for a tool that stitches IPFIX/ netflow data together into bi-directional sessions. The codec seems to run well when ingesting data from SonicWall and Cisco de…
-
Good morning again,
I'm trying to use the project to get conclusions about a pcap file with "clean traffic" to calibrate dynamically each 60 minutes and after 2 hours starting to generate malicious…
-
If it does not help, please fill information below:
* Your operating system name and version?
CentOS 7
* Please attach your /etc/fastnetmon.conf configuration file
https://pastebin.com/yrzHtrEQ
*…
-
I have a Juniper MX104 router running Junos 16.1R6 and it is configured to send NAT port block allocation records via IPFIX. Scrutinizer handles them fine, but the logstash netflow codec dies. with th…
-
I've created a new "cisco-hsl" branch to add support for Cisco HSL.
However, I'm running into a structural issue:
* In template 284 both l4_src_port and l4_dest_port occur twice. This leads to…
-
Please implement MPLS labeled packet receive in promisc mode, should be ease modification of promisc_rcv(), now MPLS labeled unicast IPv6/IPv4 packets are droped. Maybe I will create patch for it.
mzi77 updated
5 years ago
-
I see this in log when using the lib
```thread 'ipfix' panicked at 'range end index 297 out of range for slice of length 88', /usr/local/cargo/git/checkouts/rs-ipfix-42c2f7fc459fd94f/0714f22/src/li…
skoky updated
3 years ago
-
- Version:6.3
- Operating System:red hat7.1
- Config File (if you have sensitive info, please remove it):
- Sample Data:
[2018-07-03T07:17:16,724][WARN ][logstash.codecs.netflow ] Can't (ye…