[netflow-tools] A softflowd bug in NetFlow v9 header's sequence number field is found.

Hitoshi Irino irino at sfc.wide.ad.jp
Sun Sep 30 00:30:25 EST 2012


Hello Damien and softflowd users,

I fixed softflowd a bug.
The sequence number field in NetFlow version 9 header is number of
exported packets.

In RFC3954,
   Sequence Number
         Incremental sequence counter of all Export Packets sent from
         the current Observation Domain by the Exporter.  This value
         MUST be cumulative, and SHOULD be used by the Collector to
         identify whether any Export Packets have been missed.

Softflowd 0.99 and older version uses number of exported flows for this
field.

I commited patches.
http://code.google.com/p/softflowd/source/detail?r=68102f450d59504e4f351df6035e9b326ae397bb

regards,
Hitoshi Irino


More information about the netflow-tools mailing list