Wireshark-bugs: [Wireshark-bugs] [Bug 7239] The display filter for the CFLOW.snmpIfIndex is limi
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7239
--- Comment #9 from Evan Huus <eapache@xxxxxxxxx> 2012-05-12 13:18:20 PDT ---
(In reply to comment #6)
> (In reply to comment #3)
> > Created attachment 8401 [details]
> > Make inputint and outputint fields UINT32s instead of UINT16s.
> >
> > Spec seems to say that they're 32-bit, so I'm not sure why they were ever put
> > as 16-bits. Oh well.
>
> At line 56 of packet-netflow.c, it says that:
>
> ** this code was written from the following documentation:
> **
> **
> http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/nfc/nfc_3_6/iug/format.pdf
> **
> http://www.caida.org/tools/measurement/cflowd/configuration/configuration-9.html
>
> If I'm reading that first document correctly, it would seem that all versions
> of netflow prior to v9 used 2 bytes for those fields, not 4. Given that, I'm
> not sure this patch will work correctly for netflow packets prior to v9.
It should work fine, since the length value passed to proto_tree_add_item()
will still be 2 for those versions, and since it's unsigned there's no sign bit
confusion that could happen.
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.
