# Netflow codec - ipfix documentation?

**URL:** <https://discuss.elastic.co/t/netflow-codec-ipfix-documentation/68995>\
**Category:** Logstash\
**Created:** [December 14, 2016, 9:54am UTC](https://discuss.elastic.co/t/netflow-codec-ipfix-documentation/68995 "2016-12-14T09:54:34Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![sliddjur](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sliddjur/32/65260_2.png) [@sliddjur](https://discuss.elastic.co/u/sliddjur)\
**Post date:** [December 14, 2016, 9:54am UTC](https://discuss.elastic.co/t/netflow-codec-ipfix-documentation/68995/1 "2016-12-14T09:54:34Z")

</div>

According to this [https://github.com/logstash-plugins/logstash-codec-netflow/commit/1ce994c643d32f4db1f0301f789b659c61c8accc](https://github.com/logstash-plugins/logstash-codec-netflow/commit/1ce994c643d32f4db1f0301f789b659c61c8accc) it seems ipfix is supported in the codec.

The official documentation says nothing about it though, could someone point me to some examples on how to use them?

My logstash log just spits

```
[2016-12-14T10:51:13,531][WARN][logstash.codecs.netflow] Invalid netflow packet received (End of file reached)
[2016-12-14T10:51:14,537][WARN][logstash.codecs.netflow] Invalid netflow packet received (End of file reached)
[2016-12-14T10:51:15,531][WARN][logstash.codecs.netflow] Invalid netflow packet received (End of file reached)

```

My test input filter

```
udp {
        port => 5044
        tags => ["netflow"]
        type => "netflow"
        codec => netflow {
                versions => [5,9,10]
                target => ipfix
        }
}
```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 11, 2017, 9:54am UTC](https://discuss.elastic.co/t/netflow-codec-ipfix-documentation/68995/2 "2017-01-11T09:54:55Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.