search

Edgio / vflow

Enterprise Network Flow Collector (IPFIX, sFlow, Netflow)
http://www.verizonmedia.com
Apache License 2.0
1.08k stars 224 forks source link

parse bytes error in netflow v9 collector #72

Open hepeng235767 opened 5 years ago

hepeng235767 commented 5 years ago

hello: I've experimented on cisco router (2911) with netflow v9 configuration , all goes well , but found option template cache value error , shown below: { "Templates":{ "1043037042":{ "Template":{ "TemplateID":259, "FieldCount":0, "FieldSpecifiers":[ { "ElementID":48, "Length":4 }, { "ElementID":84, "Length":40 }, { "ElementID":49, "Length":1 }, { "ElementID":50, "Length":2 } ], "ScopeFieldCount":0, "ScopeFieldSpecifiers":[ { "ElementID":1, "Length":4 } ] }, "Timestamp":1537339739 } } },
we can see , "FieldCount" and "ScopeFieldCount" should not be zero. Thus , i consumer the message from kafka , then got a parsed value error: "DataSets":[ [ { "I":48, "V":10 }, { "I":84, "V":"5-SAMPLER" }, { "I":49, "V":0 }, { "I":50, "V":"0x0000" }, { "I":1, "V":"0x0002000a" } ] ] Obviously , these values do not match template length. so can give me some help ?

mehrdadrad commented 5 years ago

@hepeng235767 sorry for late response. I just fixed an issue at netflow9, I think it should be fixed too. could you please try again and let me know. thanks!