https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7239
--- Comment #6 from Chris Maynard <christopher.maynard@xxxxxxxxx> 2012-05-12 10:26:52 PDT ---
(In reply to comment #3)
> Created attachment 8401 [details]
> Make inputint and outputint fields UINT32s instead of UINT16s.
>
> Spec seems to say that they're 32-bit, so I'm not sure why they were ever put
> as 16-bits. Oh well.
At line 56 of packet-netflow.c, it says that:
** this code was written from the following documentation:
**
**
http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/nfc/nfc_3_6/iug/format.pdf
**
http://www.caida.org/tools/measurement/cflowd/configuration/configuration-9.html
If I'm reading that first document correctly, it would seem that all versions
of netflow prior to v9 used 2 bytes for those fields, not 4. Given that, I'm
not sure this patch will work correctly for netflow packets prior to v9.
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.
