Netflow v9 ipv6

Carter Bullard carter at qosient.com
Tue Apr 7 00:13:49 EDT 2015


Hey Eric,
Any luck on our attempt to fix Netflow v9 parsing of ipv6 flows ???
Carter

> On Apr 3, 2015, at 3:37 PM, Carter Bullard <carter at qosient.com> wrote:
> 
> Hey Eric,
> Lets change k_CiscoV9IPv6SrcMask to k_CiscoV9IPV6SrcMask (for consistency), and try out this argus_output.c file.
> I’m getting good results with this attempt.
> Carter
>  
> <argus_import.c>
> 
>> On Apr 2, 2015, at 5:17 PM, Eric Camirand <techr at nexweb.ca <mailto:techr at nexweb.ca>> wrote:
>> 
>> 
>> Or for consistency, change include/argus/CflowdFlowPdu.h
>> 
>> 475c475
>> < #define k_CiscoV9IPv6SrcMask		29
>> ---
>>> #define k_CiscoV9IPV6SrcMask		29
>> 
>> Thanks,
>> 
>> Eric
>> 
>>> On Apr 2, 2015, at 3:56 PM, Eric Camirand <techr at nexweb.ca <mailto:techr at nexweb.ca>> wrote:
>>> 
>>> Carter,
>>> 
>>> Please replace k_CiscoV9IPV6SrcMask by k_CiscoV9IPv6SrcMask in your file.
>>> 
>>> I will get back to you soon with a test result.
>>> 
>>> Thanks,
>>> 
>>> 
>>> Eric
>>> 
>>>> On Apr 2, 2015, at 3:39 PM, Carter Bullard <carter at qosient.com <mailto:carter at qosient.com>> wrote:
>>>> 
>>>> Gentle people,
>>>> I think I have a fix for netflow v9 ipv6 import. If you could test the mods, replace your clients ./common/argus_import.c with the included one, recompile, that then check out ra.1 to see if you can now read some IPv6 Netflow v9 data, that would be great !!!
>>>> 
>>>> Thanks,
>>>> 
>>>> Carter
>>>> 
>>>> <argus_import.c>
>>>> 
>> 
> 
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20150407/76129451/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6837 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20150407/76129451/attachment.bin>


More information about the argus mailing list