Bug fix for v1. Cisco documentation for v1 record size is wrong at: http://www.cisco.com/warp/public/cc/pd/iosw/ioft/neflct/tech/napps_wp.htm
but better (not perfect) at: http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/nfc/nfc_3_0/nfc_ug/nfcform.htm#18955 v1, v5, and v7 all tested against recent packet captures. mattSMART Index: packet-netflow.h =================================================================== RCS file: /cvsroot/ethereal/packet-netflow.h,v retrieving revision 1.3 diff -u -u -r1.3 packet-netflow.h --- packet-netflow.h 2002/09/09 20:22:51 1.3 +++ packet-netflow.h 2002/09/10 16:43:38 @@ -40,7 +40,7 @@ #define UDP_PORT_NETFLOW 5000 /* XXX */ #define NETFLOW_V1_HDR (4 * 4) -#define NETFLOW_V1_REC (4 * 13) +#define NETFLOW_V1_REC (4 * 12) #define NETFLOW_V5_HDR (4 * 6) #define NETFLOW_V5_REC (4 * 12) #define NETFLOW_V7_HDR (4 * 6)
