Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: OpenSSH: Bugs

[Bug 1958] New: NetFlow v9 - incorrect count field in NetFlow v9 header

 

 

OpenSSH bugs RSS feed   Index | Next | Previous | View Threaded


bugzilla-daemon at bugzilla

Dec 13, 2011, 11:06 AM

Post #1 of 1 (126 views)
Permalink
[Bug 1958] New: NetFlow v9 - incorrect count field in NetFlow v9 header

https://bugzilla.mindrot.org/show_bug.cgi?id=1958

Bug #: 1958
Summary: NetFlow v9 - incorrect count field in NetFlow v9
header
Classification: Unclassified
Product: softflowd
Version: -current
Platform: All
OS/Version: All
Status: NEW
Severity: major
Priority: P2
Component: softflowd
AssignedTo: djm [at] mindrot
ReportedBy: ecoff [at] andrew


According to the NetFlow v9 RFC, the count field in the NetFlow v9
header is:

The total number of records in the Export Packet, which is the sum of
Options FlowSet records, Template FlowSet records, and Data FlowSet
records.

softflowd is exporting the count as ONLY the number of data flowset
records and not including the Template flowset records.

Tools such as nfcapd ignore the count but report it when compiled with
DEVEL flags:

Process_v9: New exporter domain 0 from: ::1

[1] Next packet: 0 10 records, buffer: 488

...

Process_v9: Processed records 12, expected 10

--
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
_______________________________________________
openssh-bugs mailing list
openssh-bugs [at] mindrot
https://lists.mindrot.org/mailman/listinfo/openssh-bugs

OpenSSH bugs RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.