Hmm .. I'm not aware of a ICMP bug somewhere. What version of nfdump and OS?
- Peter
On 6/20/13 W25 14:40, Jens Hektor wrote:
> In the beginning of the year I had to change on out Cat 6500
> from netflow v5 to v9 just get IPv6 into my flows.
>
> As I have a profile that especially deals with ICMP traffic
> and shows type & codes of ICMP packets, I was surprised,
> that ICMP type & code (which are stored in the "destination port")
> are now swapped in this two-byte field.
>
> So my graphs have now some interesting types ...
>
> Question: "feature" of my cat 6500 or bug in nfdump?
>
>
>
> ------------------------------------------------------------------------------
> This SF.net email is sponsored by Windows:
>
> Build for Windows Store.
>
> http://p.sf.net/sfu/windows-dev2dev
>
>
>
> _______________________________________________
> Nfsen-discuss mailing list
> Nfsen-discuss@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
>
--
--
Be nice to your netflow data
------------------------------------------------------------------------------
This SF.net email is sponsored by Windows:
Build for Windows Store.
http://p.sf.net/sfu/windows-dev2dev
_______________________________________________
Nfsen-discuss mailing list
Nfsen-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
