tcpdump mailing list archives

[PATCH] pay attention to the enterprise field of the sflow flow and counter record format


From: Rick Jones <rick.jones2 () hp com>
Date: Thu, 14 Apr 2011 14:59:08 -0700

Thanks to some traces sent my way by Gavin McCullagh, and a comparison
against the output of inMon's sflowtool, I can confidently say "Yes
Virginia, there is an enterprise other than zero."  Which means lest we
start trying to decode something as what it is not, we best actually
look at the enterprise field and make sure it is one we recognize.

Signed-off-by: Rick Jones <rick.jones2 () hp com>


Attachment: enterprise_patch.txt
Description:

-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.

Current thread: