openssh bugs - Dec 2011 - [Bug 1958] New: NetFlow v9 - incorrect count field in NetFlow v9 header

https://bugzilla.mindrot.org/show_bug.cgi?id=1958

             Bug #: 1958
           Summary: NetFlow v9 - incorrect count field in NetFlow v9
                    header
    Classification: Unclassified
           Product: softflowd
           Version: -current
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: major
          Priority: P2
         Component: softflowd
        AssignedTo: djm at mindrot.org
        ReportedBy: ecoff at andrew.cmu.edu


According to the NetFlow v9 RFC, the count field in the NetFlow v9
header is:

The total number of records in the Export Packet, which is the sum of
Options FlowSet records, Template FlowSet records, and Data FlowSet
records. 

softflowd is exporting the count as ONLY the number of data flowset
records and not including the Template flowset records.

Tools such as nfcapd ignore the count but report it when compiled with
DEVEL flags:

Process_v9: New exporter domain 0 from: ::1

[1] Next packet: 0 10 records, buffer: 488 

...

Process_v9: Processed records 12, expected 10

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1958

ecoff at andrew.cmu.edu changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                URL|                            |http://www.ietf.org/rfc/rfc
                   |                            |3954.txt

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1958

ecoff at andrew.cmu.edu changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |ecoff at andrew.cmu.edu

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.