Hi,
Current NetFlow V9/IPFIX dissector treats IN_BYTES (IE=1) and
IN_PERMANENT_BYTES (IE=85) exactly in the same way. The same applies
to IN_PKTS (IE=2) and IN_PERMANENT_PKTS (IE=86). However,
IN_BYTES/IN_PKTS and IN_PERMANENT_BYTES/IN_PERMANENT_PKTS have
different semantics so they should be distinguishable when they are
displayed or specified in a filter. Please find attached the patch
which does that.
Regards,
---
Motonori Shindo
Attachment:
netflowv9_permanent_ies.diff
Description: Binary data
