cvs commit: src/sys/netgraph/netflow netflow.c

[Bruce A. Mah]

Maxim Konovalov wrote:
> maxim       2006-04-25 19:56:54 UTC
> 
>   FreeBSD src repository
> 
>   Modified files:
>     sys/netgraph/netflow netflow.c 
>   Log:
>   o Set to zero engine_type, engine_id and pad (cisco calls it
>   sampling_interval) fields in netflow v5 header.  We do not use
>   them but some netflow tools show garbage.
>   
>   PR:             kern/96296  http://www.FreeBSD.org/cgi/query-pr.cgi?pr=96296
>   Submitted by:   David Duchscher
>   Approved by:    glebius
>   MFC after:      1 week

FYI:  Cisco documents the pad / sampling_interval field in the NetFlow 
v5 header differently in different documents (specifically, in different 
versions of the NetFlow Solutions Guide).  IIRC, an earlier version 
called it "sampling_interval" and a later version converted this to 
padding (I don't know if IOS ever put anything other than zero here, 
however).  This likely accounts for some of the confusion surrounding 
this field.

Bruce.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 250 bytes
Desc: OpenPGP digital signature
Url : http://lists.freebsd.org/pipermail/cvs-src/attachments/20060426/01440176/signature.pgp