Incorrect NetFlow v8 TOS AS aggregation dissection
Summary
- netflow v8 TOS AS aggregation (9) packet field sort parsed error ,the last 3 fields order should be input_interface, output_interface,tos+pad+reversed;
https://www.cisco.com/c/en/us/td/docs/net_mgmt/netflow_collection_engine/5-0-3/user/guide/format.html#wp1008451table1008448 - netflow v8 AggMethod: V8 TOS+Prefix Matrix aggregation (13) src_mask,dst_mask decode in wrong order too
Sample capture file
Edited by Johnson