LogStash & Netflow : Wrong values?

[Julzor (Julien Del Peso)]

Hi,

Thank you for your reply.

Yes, this is Netflow V9.

I will look into the field you mentionned, however i made another post because i discovered that my Netflow LogStash node might drop some UDP packets

Netflow Codec : UDP receive errors

Hi, I have installed LogStash with the Netflow module to catch my flows and output them in ES and it works great, i can see my stats in Kibana without problems. I have between 5k and 12k flows/sec depending of the time of the day. A dedicated VM is doing the job with 16 CPU and 8G RAM, but i can see in Netstat that i have a lot of receiving errors : Udp: 1146481 packets received 89 packets to unknown port received. 59566 packet receive errors 475 packets sent 59566 receive buffer errors …