search

netsampler / goflow2

High performance sFlow/IPFIX/NetFlow Collector
BSD 3-Clause "New" or "Revised" License
425 stars 99 forks source link

Support for Netflow v5 #97

Closed acherla closed 1 year ago

acherla commented 1 year ago

Any plans to support Netflow v5 for goflow2? We are receiving errors in the goflow2 adapter when attempting to deserialize netflow v5 traffic using the latest build of goflow2.

time="2022-07-20T12:17:31Z" level=error msg="Error from: NetFlow (1) duration: 2.79µs. NetFlow/IPFIX version error: 5"
lspgn commented 1 year ago

It's supported. You have to open a socket for it -listen nfl://...

acherla commented 1 year ago

@lspgn Per the config it already defaults to sflow://:6343,netflow://:2055 . Which means the container should already be opening a socket to both, we are routing the traffic to 2055, but the above error still shows up. It does properly parse v9 and v10 traffic, but fails to parse v5. This is because the current parser doesnt even contain a decoder for v5

edit: Looks like i found the legacy decoder

lspgn commented 1 year ago

Yes I agree this could be improved by sharing the socket associated with NetFlow. This dedicates one socket for template-based messages.

lspgn commented 1 year ago

I assume this was answered. Closing.