Mailing List Archive

[Bug 1958] New: NetFlow v9 - incorrect count field in NetFlow v9 header
https://bugzilla.mindrot.org/show_bug.cgi?id=1958

Bug #: 1958
Summary: NetFlow v9 - incorrect count field in NetFlow v9
header
Classification: Unclassified
Product: softflowd
Version: -current
Platform: All
OS/Version: All
Status: NEW
Severity: major
Priority: P2
Component: softflowd
AssignedTo: djm@mindrot.org
ReportedBy: ecoff@andrew.cmu.edu


According to the NetFlow v9 RFC, the count field in the NetFlow v9
header is:

The total number of records in the Export Packet, which is the sum of
Options FlowSet records, Template FlowSet records, and Data FlowSet
records.

softflowd is exporting the count as ONLY the number of data flowset
records and not including the Template flowset records.

Tools such as nfcapd ignore the count but report it when compiled with
DEVEL flags:

Process_v9: New exporter domain 0 from: ::1

[1] Next packet: 0 10 records, buffer: 488

...

Process_v9: Processed records 12, expected 10

--
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
_______________________________________________
openssh-bugs mailing list
openssh-bugs@mindrot.org
https://lists.mindrot.org/mailman/listinfo/openssh-bugs