Wireshark-dev: [Wireshark-dev] Permanent Bytes/Packets handling enhancement in NetFlowV9/IPFIX
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Motonori Shindo <motonori@xxxxxxx>
Date: Wed, 6 Apr 2011 13:55:07 +0900
Hi,

Current NetFlow V9/IPFIX dissector treats IN_BYTES (IE=1) and
IN_PERMANENT_BYTES (IE=85) exactly in the same way. The same applies
to IN_PKTS (IE=2) and IN_PERMANENT_PKTS (IE=86). However,
IN_BYTES/IN_PKTS and IN_PERMANENT_BYTES/IN_PERMANENT_PKTS have
different semantics so they should be distinguishable when they are
displayed or specified in a filter. Please find attached the patch
which does that.

Regards,

---
Motonori Shindo

Attachment: netflowv9_permanent_ies.diff
Description: Binary data