Ethereal-dev: Re: [Ethereal-dev] NetFlow dissector bug fix for v1

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Bill Fumerola <billf@xxxxxx>
Date: Tue, 10 Sep 2002 11:32:00 -0700
On Tue, Sep 10, 2002 at 12:49:03PM -0400, Matthew Smart wrote:
> Bug fix for v1.  Cisco documentation for v1 record size is wrong at:
> 
>    http://www.cisco.com/warp/public/cc/pd/iosw/ioft/neflct/tech/napps_wp.htm
> 
> but better (not perfect) at:
> 
>   http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/nfc/nfc_3_0/nfc_ug/nfcform.htm#18955

cisco's documentation is just plain wrong in some files (some fields are
reversed, some field sizes are twice as long as they really are).

two documents that as far as i can tell don't contain flaws are:

http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/nfc/nfc_3_6/iug/format.pdf
http://www.caida.org/tools/measurement/cflowd/configuration/configuration-9.html

i've filed bug reports with both cisco and juniper for flaws in
documentation & implementation that i found writing the dissector. as a
general rule, cisco doesn't retroactively fix documentation - so always
use the latest version of the nfc software's documentation.

-- 
- bill fumerola / fumerola@xxxxxxxxxxxxx / billf@xxxxxxxxxxx / billf@xxxxxx