mikemiles-dev / netflow_parser

netflow_parser
Apache License 2.0
6 stars 3 forks source link

feature: support Post NAT fields in NetFlow v9 #72

Open karel-un opened 1 week ago

karel-un commented 1 week ago

Mike would you be so kind and add Post NAT fields to NetFlow v9 parser, specifically I need:

Mapped Flow ID Fields (L3 IPv4)

225  NF_F_XLATE_SRC_ADDR_IPV4    Post NAT Source IPv4 Address
226  NF_F_XLATE_DST_ADDR_IPV4    Post NAT Destination IPv4 Address
227  NF_F_XLATE_SRC_PORT         Post NAT Source Transport Port
228  NF_F_XLATE_DST_PORT         Post NAT Destination Transport Port

see

https://www.cisco.com/c/en/us/td/docs/security/asa/special/netflow/asa_netflow.html

mikemiles-dev commented 1 week ago

https://github.com/mikemiles-dev/netflow_parser/pull/73 Does this work?

karel-un commented 1 week ago

I am leaving for vacation in an hour, will be back for testing in a week. Thanks for fast reply!

mikemiles-dev commented 2 hours ago

I am leaving for vacation in an hour, will be back for testing in a week. Thanks for fast reply!

Did you have a chance to look at this?