search

ntop / nProbe

Open source components and extensions for nProbe
http://ntop.org
GNU General Public License v2.0
1.66k stars 44 forks source link

flow custom IEs are not passed properly into ntopng GUI #547

Closed marehvi closed 5 months ago

marehvi commented 2 years ago

Export of the Checkpoint vendor specific IEs to ntopng is not working properly

Custom IEs definition: image

The probe template is set to: -T="@NTOPNG@ %CKP_VS_ID %CKP_CLUSTER_ID"

ntopng displays randomly only one field (for some flows it's CKP_VS_ID, for others it's CKP_CLUSTER_ID) and with wrong name:

image

When dumpling flows from the probe it shows the customer IEs properly, also when setting the probe in passthrough mode then ntopng displays additional flow elements as 2620:463 and 2620:467 respectively (unfortunately it also modifies the "Flow Exporter IPv4 Address" to the probe itself).

lucaderi commented 2 years ago

Fixed in the current nProbe implementation