jorritfolmer
commented
5 years ago This is going to be a breaking change.
grepping around netflow.yaml I can see more dups:
- fw_event
- xlate_dst_addr_ipv4
- xlate_dst_port
- xlate_src_addr_ipv4
- xlate_src_port
Which brings us to the question:
- do we fix the root cause (support multiple identical field like the RFC says we should)
- or do we continue fixing symptoms
Fixes duplicate ICMP Type from Forcepoint NGFW.