Closed ghost closed 5 years ago
In /lib/logstash/codecs/netflow.rb the calculation of absolute timestamps for "first_switched" and "last_switched" is incorrect:
micros = (flowset.unix_nsec / 1000) - (millis % 1000)
micros = (flowset.unix_nsec / 1000) - ((millis % 1000) * 1000)
seconds--
seconds -= 1
micros = 1000000 - (millis % 1000)
micros = 1000000 - ((millis % 1000) * 1000)
In /lib/logstash/codecs/netflow.rb the calculation of absolute timestamps for "first_switched" and "last_switched" is incorrect:
micros = (flowset.unix_nsec / 1000) - (millis % 1000)
bymicros = (flowset.unix_nsec / 1000) - ((millis % 1000) * 1000)
Line 141 replaceseconds--
byseconds -= 1
Line 265 replacemicros = 1000000 - (millis % 1000)
bymicros = 1000000 - ((millis % 1000) * 1000)