You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
According to IPFIX RFC, when field highest bit is set to 1 then the field is considered Enterprise.
In such case just after that filed there are additional 4 bytes with value Enterprise Number an id in the field interpretation for the lookup table.
Due to that when hitting records with Enterprise-Specific Information Elements will get corrupted.
According to IPFIX RFC, when field highest bit is set to 1 then the field is considered Enterprise.
In such case just after that filed there are additional 4 bytes with value Enterprise Number an id in the field interpretation for the lookup table.
Due to that when hitting records with Enterprise-Specific Information Elements will get corrupted.
link to RFC
https://datatracker.ietf.org/doc/html/rfc7011#page-64
link to faulty function:
goflow/decoders/netflow/netflow.go
Line 93 in 742cddc
The text was updated successfully, but these errors were encountered: