# Netflow.conf.erb need help updating **URL:** \ **Category:** Logstash\ **Created:** [April 25, 2018, 5:21pm UTC](https://discuss.elastic.co/t/netflow-conf-erb-need-help-updating/129542 "2018-04-25T17:21:12Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![dalamar666](https://avatars.discourse-cdn.com/v4/letter/d/e9bcb4/32.png) [@dalamar666](https://discuss.elastic.co/u/dalamar666)\ **Post date:** [April 25, 2018, 5:21pm UTC](https://discuss.elastic.co/t/netflow-conf-erb-need-help-updating/129542/1 "2018-04-25T17:21:12Z")
Hi, There is some code I need help updating with this file. According to a log from cisco they have changed the format they are sending the bytes in. instead of in\_permanent like in the file, they are using another format. How can this file get updated to reflect the changes? New fields 231 (initiatorOctets) and 232 (responderOctets) will replace field 85 (IN\_PERMANENT\_BYTES) along with real-time flow update support in 8.4(5) and later software. However, it may take a bit for third-party Netflow Collectors to pick up these new fields as they come from IPFIX rather than legacy Netflow V9 world. > **[ASA 5520 Netflow packets don't contain byte data](https://supportforums.cisco.com/t5/other-network-infrastructure/asa-5520-netflow-packets-don-t-contain-byte-data/td-p/2495574)** > > Hi Please can you help. We've got a Netflow log collector and since we've upgraded an ASA 5520 from 8.12 to 9.1(2) it has stopped sending the field "IN\_PERMANENT\_BYTES". Does anyone have any idea how to re-add a byte or packet count field to the... ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [May 23, 2018, 5:21pm UTC](https://discuss.elastic.co/t/netflow-conf-erb-need-help-updating/129542/2 "2018-05-23T17:21:37Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.