Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 26 Apr 2006 08:19:22 -0700
From:      "Bruce A. Mah" <bmah@freebsd.org>
To:        Maxim Konovalov <maxim@freebsd.org>
Cc:        cvs-src@freebsd.org, src-committers@freebsd.org, cvs-all@freebsd.org
Subject:   Re: cvs commit: src/sys/netgraph/netflow netflow.c
Message-ID:  <444F8F7A.80106@freebsd.org>
In-Reply-To: <200604251956.k3PJusEr029501@repoman.freebsd.org>
References:  <200604251956.k3PJusEr029501@repoman.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help

[-- Attachment #1 --]
Maxim Konovalov wrote:
> maxim       2006-04-25 19:56:54 UTC
> 
>   FreeBSD src repository
> 
>   Modified files:
>     sys/netgraph/netflow netflow.c 
>   Log:
>   o Set to zero engine_type, engine_id and pad (cisco calls it
>   sampling_interval) fields in netflow v5 header.  We do not use
>   them but some netflow tools show garbage.
>   
>   PR:             kern/96296  http://www.FreeBSD.org/cgi/query-pr.cgi?pr=96296
>   Submitted by:   David Duchscher
>   Approved by:    glebius
>   MFC after:      1 week

FYI:  Cisco documents the pad / sampling_interval field in the NetFlow 
v5 header differently in different documents (specifically, in different 
versions of the NetFlow Solutions Guide).  IIRC, an earlier version 
called it "sampling_interval" and a later version converted this to 
padding (I don't know if IOS ever put anything other than zero here, 
however).  This likely accounts for some of the confusion surrounding 
this field.

Bruce.


[-- Attachment #2 --]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (FreeBSD)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFET49+2MoxcVugUsMRAqDNAJ9ioze/oDx027ciUc2+wF45oRZlnwCdGjSA
eTaDGVxP2QujDI9WkGwS+Ss=
=WmlP
-----END PGP SIGNATURE-----

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?444F8F7A.80106>