[netflow-tools] ipfix sequence error problem.

Hitoshi Irino irino at sfc.wide.ad.jp
Sun Sep 28 21:46:48 EST 2014


Hello

I commited new version (Revision: 33b6916b544d). It fixes sequence 
number in IPFIX header. And I fixed ifdef macro for htobe64 that does 
not need HAVE_ENDIAN_H.

Please do "autoreconf" and "configure" before you do "make".

Please try it.

Regards
Hitoshi Irino

On 2014年09月18日 17:51, Varun Sharma wrote:
> Hi,
>
> I am using Softflowd IPFIX supported version ( Revision
> :80aac3b2fec3).I exported flows in IPFIX format to collector server (
> NFDUMP 1.6.10 ) .
> I've noticed sequence errors in nfcapd logs. Basically it means
> somewhere flows are missing ( the number sequence errors ) for
> whatever reason.
> Whereas in case of netflow v5 or netflow v9 it’s work properly. Means
> no sequence error in nfcapd logs.
>
> After checking ipfix.c code I found that sequence number field of
> ipfix header populates with wrong value.
>
> According to RFC 5101 , IPFIX Sequence Number contains the total
> number of IPFIX Data Records sent for the UDP Transport Session prior
> to the receipt of this IPFIX Message, modulo 2^32.
>
> But here sequence number field populates with total number of packet sent.
>
> Do you have any patch that solve this problem ?
>
> Thanks in advance.
>
> Regards
> Varun
> _______________________________________________
> netflow-tools mailing list
> netflow-tools at mindrot.org
> https://lists.mindrot.org/mailman/listinfo/netflow-tools
>


More information about the netflow-tools mailing list