Ethereal-dev: [Ethereal-dev] NetFlow dissector bug fix for v1

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Matthew Smart <smart@xxxxxxxxxx>
Date: Tue, 10 Sep 2002 12:49:03 -0400
Bug fix for v1.  Cisco documentation for v1 record size is wrong at:

   http://www.cisco.com/warp/public/cc/pd/iosw/ioft/neflct/tech/napps_wp.htm

but better (not perfect) at:

  http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/nfc/nfc_3_0/nfc_ug/nfcform.htm#18955

v1, v5, and v7 all tested against recent packet captures.

mattSMART

Index: packet-netflow.h
===================================================================
RCS file: /cvsroot/ethereal/packet-netflow.h,v
retrieving revision 1.3
diff -u -u -r1.3 packet-netflow.h
--- packet-netflow.h	2002/09/09 20:22:51	1.3
+++ packet-netflow.h	2002/09/10 16:43:38
@@ -40,7 +40,7 @@
 #define UDP_PORT_NETFLOW	5000	/* XXX */
 
 #define NETFLOW_V1_HDR	(4 * 4)
-#define NETFLOW_V1_REC	(4 * 13)
+#define NETFLOW_V1_REC	(4 * 12)
 #define NETFLOW_V5_HDR	(4 * 6)
 #define NETFLOW_V5_REC	(4 * 12)
 #define NETFLOW_V7_HDR	(4 * 6)