[Bug 1958] New: NetFlow v9 - incorrect count field in NetFlow v9 header

bugzilla-daemon at bugzilla.mindrot.org bugzilla-daemon at bugzilla.mindrot.org
Wed Dec 14 06:06:46 EST 2011


             Bug #: 1958
           Summary: NetFlow v9 - incorrect count field in NetFlow v9
    Classification: Unclassified
           Product: softflowd
           Version: -current
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: major
          Priority: P2
         Component: softflowd
        AssignedTo: djm at mindrot.org
        ReportedBy: ecoff at andrew.cmu.edu

According to the NetFlow v9 RFC, the count field in the NetFlow v9
header is:

The total number of records in the Export Packet, which is the sum of
Options FlowSet records, Template FlowSet records, and Data FlowSet

softflowd is exporting the count as ONLY the number of data flowset
records and not including the Template flowset records.

Tools such as nfcapd ignore the count but report it when compiled with
DEVEL flags:

Process_v9: New exporter domain 0 from: ::1

[1] Next packet: 0 10 records, buffer: 488 


Process_v9: Processed records 12, expected 10

Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.

More information about the openssh-bugs mailing list