Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Netflow v9 source_id #64

Open
fredbcode opened this issue Jun 26, 2019 · 0 comments
Open

Netflow v9 source_id #64

fredbcode opened this issue Jun 26, 2019 · 0 comments

Comments

@fredbcode
Copy link

Hello,

I'm trying to debug Netflow V9 from CISCO without source_id value
The goal is to add IP source (router who generates flow) to the source_id https://netflow.caligare.com/netflow_v9.htm before duplication.

This can be very useful to find the source device
Any advice on how to do this would be greatly appreciated

For now I'm trying to see the buffer without any success
https://github.com/sleinen/samplicator/blob/master/samplicate.c#L346

I added this right after
if (n > 0) { fpdu[n] = '\0'; printf("Test received message: %s size: %ld\n", fpdu, sizeof (fpdu) ); }

But fpdu message is always empty (size not of course), I don't understand why
I guess there is something specific here, a basic client/server UDP test works well

I guess that show the socket data can also be very interesting for debugging purpose in many cases

Thanks

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant