mikemiles-dev / netflow_parser

netflow_parser
Apache License 2.0
9 stars 4 forks source link

Fix netflow v9 parsing #42

Closed maksimtor closed 8 months ago

maksimtor commented 8 months ago

V9 parser seems to not work correctly in some of the more complex cases. I improved parsing a bit:

  1. Currently we parse and keep length of the Flowset in templates and data structures. I changed it to keep length in Flowset and pass it as arguments to other parsers if needed.
  2. One of the reasons why this is needed, it is because we might have multiple templates in one Flowset. So apart from keeping length in Flowset, I changed the behavior of Template parsing. Now it is parsed as Vec