Netflow not supported?

Elastic Stack Beats
1

HI there, I´m trying to setup netflow using filebeat and the only thing I can see is this message:

filebeat[2804]: 2021-08-24T18:10:01.108-0300        WARN        [netflow]        netflow/input.go:242        Error parsing NetFlow packet of length 849 from X.X.X.X:40102: netflow protocol version 15416 not supported

Follow my netflow.conf:

- module: netflow
  log:
    enabled: true
    var:
      netflow_host: 0.0.0.0
      netflow_port: 2055

There´s any extra configuration to be made??

Thanks for the attention.

2

I think the protocol you are trying to use is unsupported. See the docs:

This input supports NetFlow versions 1, 5, 6, 7, 8 and 9, as well as IPFIX. For NetFlow versions older than 9, fields are mapped automatically to NetFlow v9.

Please open an issue on GH if you would like us to add support for this: Sign in to GitHub · GitHub

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.