search

mikemiles-dev / netflow_parser

netflow_parser
Apache License 2.0
7 stars 3 forks source link

v9 packets containing FLOW_LABEL are not parsable #69

Closed arckoor closed 3 months ago

arckoor commented 3 months ago

When parsing Ipv6 flows that contain a FLOW_LABEL record, the parser breaks (see template and data #262 in this packet)

FLOW_LABEL is number 31, which currently is an UnsignedDataNumber. This tries to parse based on field length, but since the field is 3 bytes long, the parser errors for that packet.

mikemiles-dev commented 3 months ago

I will have a synopsis on this in a couple hours .

mikemiles-dev commented 3 months ago

Ok, Added version 0.3.4 with 3 byte DataNumber support. Apologies for this oversight.