path-network / logstash-codec-sflow

Logstash codec plugin to decrypt sflow
Other
35 stars 17 forks source link

Feature Request: extended_mpls_tunnel structure #23

Open Lostish opened 4 years ago

Lostish commented 4 years ago

Im trying to get elastiflow working with Brocade MLXe-4 routers, 6 or so of them. They are using MPLS.

Rob Cowart over at elastiflow investegated the error i got from the log. [WARN ][logstash.codecs.sflow ] Invalid sflow packet received (End of file reached)

With an answer:

The issue is that the sFlow flow samples include the extended_mpls_tunnel structure, which is currently not supported by the Logstash sFlow Codec

Elastiflow Issue: #459

Can this be implemented? Without it i cant parse any data into elastiflow, leaving a blank kibana :(

Here is an sflow pcap for reference and troubble shoot/implementation, sflow.zip

Regards Kim