[netflow-tools] softflowd TOS

[Damien Miller]

Maiko Wessel wrote:
> Hi,
> 
> is there a patch to log the tos field from ipv4/ipv4 packets with the 
> softflowd?
> 
> We use softflowd and flowd and we need the bits from tos field. I've 
> looked at the flowd source
> and they are ready to read the tos value from the netflow packets, but 
> softflowd can't emit netflow
> packets with tos?!?

Please try the attached patch. It tries to learn the ToS from the first
packet in the flow only, as this is what usually determines how the flow
is treated by routers.

Warning: I wrote this in a hurry - please test that NetFlow v.9 works in
particular

Regards,
Damien Miller
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: softflowd-tos.diff
Url: http://lists.mindrot.org/pipermail/netflow-tools/attachments/20050906/32d21d0d/attachment.ksh