Hi All,
Nfcapd is not getting sampling rate correctly from netflow v9 options.
I'm getting this error message:
Aug 18 14:04:42 centos66 nfcapd: Process_v9: Option field Type: 48, length 4
not supported
Aug 18 14:04:42 centos66 nfcapd: Process_v9: Option field Type: 50, length 2
not supported
A Cisco router is sending: option 48 of length 4 bytes
and option 50 of length 2 bytes
The standard sizes should be : option 48 of length 1 byte
and option 50 of length 4 bytes
So the error messages! however, if we look atRFC 7011 section 6.2 [1] , we see
that collector should support reduced size fields!
Are there any patch to solve this issue? any plan to support it? if no, how
hard would it be to implement the patch?
Thank you.
Ibrahim
[1] https://tools.ietf.org/html/rfc7011#section-6.2
------------------------------------------------------------------------------
_______________________________________________
Nfdump-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
