# Hitting error - Ignoring Netflow version v10

**URL:** <https://discuss.elastic.co/t/hitting-error-ignoring-netflow-version-v10/73796>\
**Category:** Logstash\
**Created:** [February 3, 2017, 6:14am UTC](https://discuss.elastic.co/t/hitting-error-ignoring-netflow-version-v10/73796 "2017-02-03T06:14:30Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![aayush.a15](https://avatars.discourse-cdn.com/v4/letter/a/f05b48/32.png) [@aayush.a15](https://discuss.elastic.co/u/aayush.a15)\
**Post date:** [February 3, 2017, 6:14am UTC](https://discuss.elastic.co/t/hitting-error-ignoring-netflow-version-v10/73796/1 "2017-02-03T06:14:30Z")

</div>

Hi I am a Logstash newbie. I am using [python-ipfix](http://www.ict-mplane.eu/sites/default/files/public/publications/518python-ipfix.pdf) module to generate IPFIX Packets and send it to LogStash on Localhost over port 10000. However, I am hitting the error - Ignoring Netflow version v10 {:level=\>:warn} in Logstash. I have not changed anything in the yaml file for netflow.

## Here is my Python Code for generating the IPFIX Packets -

```
import socket
import sys

# Create a TCP/IP socket
sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)

# Connect the socket to the port where the server is listening
server_address = ('localhost', 10000)
print('connecting to %s port %s' % server_address)
sock.connect(server_address)

#Import Requisite Modules
import ipfix.ie
import ipfix.template
import ipfix.message
from ipaddress import ip_address

rec = { "sourceIPv4Address" : ip_address("10.1.2.3"),"destinationIPv4Address" : ip_address("10.5.6.7")}
rec1 = { "sourceIPv4Address" : ip_address("10.1.2.4"),"destinationIPv4Address" : ip_address("10.5.6.6")}
#Information Elements Definition
ipfix.ie.use_iana_default()

#Template Definition
tmpl = ipfix.template.from_ielist(256,ipfix.ie.spec_list(("sourceIPv4Address","destinationIPv4Address")))
print(tmpl)

#Message Definition
msg = ipfix.message.MessageBuffer()
msg.begin_export(8304)
msg.add_template(tmpl)
print(msg)

msg.export_ensure_set(256)
print(msg)

msg.export_namedict(rec)
msg.export_namedict(rec1)
print(msg)

b = msg.to_bytes()
msg.begin_export()
print(msg)
try:

    # Send data
    message = b
    print('sending "%s"' % message)
    sock.sendall(message)
finally:
    print('closing socket')
    sock.close()

```

* * *

## My Logstash config file looks like this - input { tcp { host =\> localhost port =\> 10000 codec =\> netflow {} type =\> ipfix } } output { stdout { codec =\> rubydebug } }

Please help me resolve this issue. Many thanks in advance 🙂

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [February 5, 2017, 9:42am UTC](https://discuss.elastic.co/t/hitting-error-ignoring-netflow-version-v10/73796/2 "2017-02-05T09:42:10Z")

</div>

What version are you on?

---

<div class="post-metadata">

**Author:** ![aayush.a15](https://avatars.discourse-cdn.com/v4/letter/a/f05b48/32.png) [@aayush.a15](https://discuss.elastic.co/u/aayush.a15)\
**Post date:** [February 6, 2017, 3:55am UTC](https://discuss.elastic.co/t/hitting-error-ignoring-netflow-version-v10/73796/3 "2017-02-06T03:55:29Z")

</div>

Mark, I am on logstash 2.2.4.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [February 6, 2017, 7:43am UTC](https://discuss.elastic.co/t/hitting-error-ignoring-netflow-version-v10/73796/4 "2017-02-06T07:43:58Z")

</div>

You need to upgrade to 5.X, netflow 10 isn't supported on that version - [https://www.elastic.co/guide/en/logstash/2.2/plugins-codecs-netflow.html](https://www.elastic.co/guide/en/logstash/2.2/plugins-codecs-netflow.html)

---

<div class="post-metadata">

**Author:** ![aayush.a15](https://avatars.discourse-cdn.com/v4/letter/a/f05b48/32.png) [@aayush.a15](https://discuss.elastic.co/u/aayush.a15)\
**Post date:** [February 6, 2017, 1:53pm UTC](https://discuss.elastic.co/t/hitting-error-ignoring-netflow-version-v10/73796/5 "2017-02-06T13:53:09Z")

</div>

Thanks a lot Mark. I upgraded to 5.2 and it works like a charm. I have pasted the output below for completeness. Thanks a million!  
{  
"netflow" =\> {  
"destinationIPv4Address" =\> "10.5.6.7",  
"sourceIPv4Address" =\> "10.1.2.3",  
"version" =\> 10  
},  
"@timestamp" =\> 2017-02-06T19:46:38.000Z,  
"port" =\> 37854,  
"@version" =\> "1",  
"host" =\> "127.0.0.1",  
"type" =\> "ipfix"  
}  
{  
"netflow" =\> {  
"destinationIPv4Address" =\> "10.5.6.6",  
"sourceIPv4Address" =\> "10.1.2.4",  
"version" =\> 10  
},  
"@timestamp" =\> 2017-02-06T19:46:38.000Z,  
"port" =\> 37854,  
"@version" =\> "1",  
"host" =\> "127.0.0.1",  
"type" =\> "ipfix"  
}

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 6, 2017, 1:53pm UTC](https://discuss.elastic.co/t/hitting-error-ignoring-netflow-version-v10/73796/6 "2017-03-06T13:53:26Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.