Netflow protocol version 0 not supported

Have been trying to ingest Netflow Data from a Fortigate Firewall through Filebeat, but upon running filebeat -e gets me to the following warning -

netflow/input.go:240 Error parsing NetFlow packet of length 220 from netflow protocol version 0 not supported

Below excerpt from my config file -

  • module: netflow
    enabled: true
    netflow_port: 2055
    protocols: [ v9 ]

Hi @w33ha-zxc, welcome to the Elastic community forums!

I see you already created a GitHub issue for this — — which is great!


The flow sent out was for sflow and not netflow.

Configuring it to Netflow fixed the issue.


This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.