Yes. srcip is being populated correctly. In addition the dstip is getting a uniform value of 32767 which tells me there is something odd going on.
I have not tried disabling local_decoder and checking as yet though.
Yes. srcip is being populated correctly. In addition the dstip is getting a uniform value of 32767 which tells me there is something odd going on.
I have not tried disabling local_decoder and checking as yet though.