search

phaag / go-nfdump

go-nfdump: A Go module to read and process nfdump files
BSD 2-Clause "Simplified" License
7 stars 1 forks source link

Nokia NAT not decoding properly #13

Closed gabrielmocan closed 3 months ago

gabrielmocan commented 3 months ago

Hi Pete,

I just tried out new extensions for Nokia NAT events, but NokiaNat() and NokiaNatString() seems not to be working properly.

NokiaNat() is returning always nil while NokiaNatString() is returning empty string.

Sample file is the same that originated the issue in nfdump main repo, but I'm attaching it anyways.

nokia_nat44.sample.zip

phaag commented 3 months ago

@gabrielmocan - that file does not contain any collected Nokia extensions. Therefore they are nil. Are you sure, to have replaced the collector from master branch?

gabrielmocan commented 3 months ago

@phaag oh, I see, so these extensions will only be available for nfcapd files created after https://github.com/phaag/nfdump/issues/533, right?

phaag commented 3 months ago

yes - nfcapd simply skips elements it does not know. Therefore only newly collected data contains those elements.

gabrielmocan commented 3 months ago

Understood, my bad then!