Netflow v9 ipv6

[Carter Bullard]

Hey Eric,
Hmmmm, do you have any NetFlow data that demonstrates that ???
I don’t have any examples here that have missing ports.
Could you print out some output so I can see what you think is missing ???

Carter


> On Apr 7, 2015, at 2:14 PM, Eric Camirand <techr at nexweb.ca> wrote:
> 
> Hello Carter,
> 
> Ipv4 address are ok now but some source port are still missing.
> 
> 
> Eric
> 
>> On Apr 7, 2015, at 12:13 AM, Carter Bullard <carter at qosient.com> wrote:
>> 
>> Hey Eric,
>> Any luck on our attempt to fix Netflow v9 parsing of ipv6 flows ???
>> Carter
>> 
>>> On Apr 3, 2015, at 3:37 PM, Carter Bullard <carter at qosient.com> wrote:
>>> 
>>> Hey Eric,
>>> Lets change k_CiscoV9IPv6SrcMask to k_CiscoV9IPV6SrcMask (for consistency), and try out this argus_output.c file.
>>> I’m getting good results with this attempt.
>>> Carter
>>> 
>>> <argus_import.c>
>>> 
>>>> On Apr 2, 2015, at 5:17 PM, Eric Camirand <techr at nexweb.ca> wrote:
>>>> 
>>>> 
>>>> Or for consistency, change include/argus/CflowdFlowPdu.h
>>>> 
>>>> 475c475
>>>> < #define k_CiscoV9IPv6SrcMask		29
>>>> ---
>>>>> #define k_CiscoV9IPV6SrcMask		29
>>>> 
>>>> Thanks,
>>>> 
>>>> Eric
>>>> 
>>>>> On Apr 2, 2015, at 3:56 PM, Eric Camirand <techr at nexweb.ca> wrote:
>>>>> 
>>>>> Carter,
>>>>> 
>>>>> Please replace k_CiscoV9IPV6SrcMask by k_CiscoV9IPv6SrcMask in your file.
>>>>> 
>>>>> I will get back to you soon with a test result.
>>>>> 
>>>>> Thanks,
>>>>> 
>>>>> 
>>>>> Eric
>>>>> 
>>>>>> On Apr 2, 2015, at 3:39 PM, Carter Bullard <carter at qosient.com> wrote:
>>>>>> 
>>>>>> Gentle people,
>>>>>> I think I have a fix for netflow v9 ipv6 import. If you could test the mods, replace your clients ./common/argus_import.c with the included one, recompile, that then check out ra.1 to see if you can now read some IPv6 Netflow v9 data, that would be great !!!
>>>>>> 
>>>>>> Thanks,
>>>>>> 
>>>>>> Carter
>>>>>> 
>>>>>> <argus_import.c>
>>>>>> 
>>>> 
>>> 
>>> 
>> 
> 
> 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6837 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20150407/89aa7e3e/attachment.bin>