Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: [Wireshark-dev] Permanent Bytes/Packets handling enhancement in NetFlowV9/IPFIX

From: Motonori Shindo <motonori@xxxxxxx>
Date: Wed, 6 Apr 2011 13:55:07 +0900
Hi,

Current NetFlow V9/IPFIX dissector treats IN_BYTES (IE=1) and
IN_PERMANENT_BYTES (IE=85) exactly in the same way. The same applies
to IN_PKTS (IE=2) and IN_PERMANENT_PKTS (IE=86). However,
IN_BYTES/IN_PKTS and IN_PERMANENT_BYTES/IN_PERMANENT_PKTS have
different semantics so they should be distinguishable when they are
displayed or specified in a filter. Please find attached the patch
which does that.

Regards,

---
Motonori Shindo

Attachment: netflowv9_permanent_ies.diff
Description: Binary data