Netflow v9 ipv6

Carter Bullard carter at qosient.com
Thu Apr 2 16:37:57 EDT 2015


Hey Eric,
Hmmmm, maybe didn’t move the fix completely over ….  Lets me see
whats up.
Carter

> On Apr 2, 2015, at 4:36 PM, Eric Camirand <techr at nexweb.ca> wrote:
> 
> Hey Carter,
> 
> Ipv4 address appear as Ipv6. This entry should be ipv4 :
> 
> 10:36:17.584000 N ip 53a4:7dce:3c6a:ab* -> :: 1 1500   REQ
> 
> Ipv6 look ok.
> 
> 10:36:17.576000 N ip 2001:db8:1::220 -> 2602:ffea:1001:11* 1 1500   REQ
> 
> For both entry, protocol and port informations are lost.
> 
> 
> Eric
> 
> 
>> On Apr 2, 2015, at 3:56 PM, Eric Camirand <techr at nexweb.ca> wrote:
>> 
>> Carter,
>> 
>> Please replace k_CiscoV9IPV6SrcMask by k_CiscoV9IPv6SrcMask in your file.
>> 
>> I will get back to you soon with a test result.
>> 
>> Thanks,
>> 
>> 
>> Eric
>> 
>>> On Apr 2, 2015, at 3:39 PM, Carter Bullard <carter at qosient.com> wrote:
>>> 
>>> Gentle people,
>>> I think I have a fix for netflow v9 ipv6 import. If you could test the mods, replace your clients ./common/argus_import.c with the included one, recompile, that then check out ra.1 to see if you can now read some IPv6 Netflow v9 data, that would be great !!!
>>> 
>>> Thanks,
>>> 
>>> Carter
>>> 
>>> <argus_import.c>
>>> 
> 
> 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6837 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20150402/3b083e18/attachment.bin>


More information about the argus mailing list