Netflow protocol version 0 not supported

Have been trying to ingest Netflow Data from a Fortigate Firewall through Filebeat, but upon running filebeat -e gets me to the following warning -

netflow/input.go:240 Error parsing NetFlow packet of length 220 from 192.168.1.10:4216: netflow protocol version 0 not supported

Below excerpt from my config file -

  • module: netflow
    log:
    enabled: true
    var:
    netflow_host: 192.168.0.154
    netflow_port: 2055
    protocols: [ v9 ]

Hi @w33ha-zxc, welcome to the Elastic community forums!

I see you already created a GitHub issue for this — https://github.com/elastic/beats/issues/15532 — which is great!

Shaunak

The flow sent out was for sflow and not netflow.

Configuring it to Netflow fixed the issue.

Thanks.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.