Duplicate IEs under Cisco PEN 9

robcowart / elastiflow

Network flow analytics (Netflow, sFlow and IPFIX) with the Elastic Stack

Other

2.49k stars 595 forks source link

Duplicate IEs under Cisco PEN 9 #653

Closed Opiekelly closed 3 years ago

Opiekelly commented 3 years ago

Looking at the latest ipfix.yml, I see there are duplicate IEs starting from 12231-12453.

Lines 1889-1891: 12231:

:string
:cisco_sdwan_12231

Lines 1754-1756: 12231:

:string
:cisco_avc_app_set

robcowart commented 3 years ago

I already have that one fixed in my dev branch. There were actually more than just that one. Actually that may have been the only duplicate, but I have a number of previously unknown SDWAN-related fields that are updated.