Netflow protocol version 0 not supported

Elastic Stack Beats
1

Have been trying to ingest Netflow Data from a Fortigate Firewall through Filebeat, but upon running filebeat -e gets me to the following warning -

netflow/input.go:240 Error parsing NetFlow packet of length 220 from 192.168.1.10:4216: netflow protocol version 0 not supported

Below excerpt from my config file -

  • module: netflow
    log:
    enabled: true
    var:
    netflow_host: 192.168.0.154
    netflow_port: 2055
    protocols: [ v9 ]
2

Hi @w33ha-zxc, welcome to the Elastic community forums!

I see you already created a GitHub issue for this — https://github.com/elastic/beats/issues/15532 — which is great!

Shaunak

3

The flow sent out was for sflow and not netflow.

Configuring it to Netflow fixed the issue.

Thanks.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.