paulmataruso/goflow2
1
0
Fork 0
mirror of https://github.com/openobserve/goflow2.git synced 2025-11-02 21:13:27 +00:00
Code Issues Packages Projects Releases Wiki Activity

Bugfix NetFlow/IPFIX producer

Browse Source 
* Source and destination mac addresses are fed from `NFV9_FIELD_xx_yyy_MAC`
  Fixes a bug where the samples were missing either source or destination Mac.
  This is supposed to be linked to the sampling direction.
This commit is contained in:
lspgn
2021-06-09 18:08:55 -07:00
parent 622c41a69d
commit 04c8543306
2 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
producer/producer_nf.go
View File

@@ -254,6 +254,10 @@ func ConvertNetFlowDataSet(version uint16, baseTime uint32, uptime uint32, recor
// Mac // Mac
case netflow.NFV9_FIELD_IN_SRC_MAC: case netflow.NFV9_FIELD_IN_SRC_MAC:
DecodeUNumber(v, &(flowMessage.SrcMac)) DecodeUNumber(v, &(flowMessage.SrcMac))
case netflow.NFV9_FIELD_IN_DST_MAC:
DecodeUNumber(v, &(flowMessage.DstMac))
case netflow.NFV9_FIELD_OUT_SRC_MAC:
DecodeUNumber(v, &(flowMessage.SrcMac))
case netflow.NFV9_FIELD_OUT_DST_MAC: case netflow.NFV9_FIELD_OUT_DST_MAC:
DecodeUNumber(v, &(flowMessage.DstMac)) DecodeUNumber(v, &(flowMessage.DstMac))

3
utils/sflow_test.go
View File

@@ -12,8 +12,7 @@ func TestDecodeFlowExpandedSFlow(t *testing.T) {
Payload: getExpandedSFlowDecode(), Payload: getExpandedSFlowDecode(),
} }
s := &StateSFlow{ s := &StateSFlow{}
}
assert.Nil(t, s.DecodeFlow(msg)) assert.Nil(t, s.DecodeFlow(msg))
} }