Skip to content

goflow2 support for PEN fields #444

Description

@Owlsbluff

Describe the bug
Im sending IPFIX records like the following with Enterprise fields pen: 9999 field 1,2,3,4 and I get template errors - time=2025-12-19T01:44:45.280Z level=WARN msg="template error" scheme=netflow hostname="" port=2055 count=1 workers=2 blocking=false queue_size=1000000
time=2025-12-19T01:45:00.253Z level=WARN msg="template error" scheme=netflow hostname="" port=2055 count=1 workers=2 blocking=false queue_size=1000000 - debug doesnt show anything further. Does goflow2 support PEN fields? I thought it did. Im using the latest version of goflow2 in docker.

formatter:
fields:
- type
- time_received_ns
- sequence_num
- sampling_rate
- sampler_address
- time_flow_start_ns
- time_flow_end_ns
- bytes
- packets
- src_addr
- dst_addr
- etype
- proto
- src_port
- dst_port
- in_if
- out_if
- src_mac
- dst_mac
# TCP performance fields
- min_rtt_us
- max_rtt_us
- avg_rtt_us
- retransmit_count
- min_tcp_window
- max_tcp_window
protobuf:
- name: min_rtt_us
index: 1001
type: varint
- name: max_rtt_us
index: 1002
type: varint
- name: avg_rtt_us
index: 1003
type: varint
- name: retransmit_count
index: 1004
type: varint
- name: min_tcp_window
index: 1005
type: varint
- name: max_tcp_window
index: 1006
type: varint

ipfix:
mapping:
- field: 1
pen: 99999
penprovided: true
destination: min_rtt_us
- field: 2
pen: 99999
penprovided: true
destination: max_rtt_us
- field: 3
pen: 99999
penprovided: true
destination: avg_rtt_us
- field: 4
pen: 99999
penprovided: true
destination: retransmit_count
- field: 5
pen: 99999
penprovided: true
destination: min_tcp_window
- field: 6
pen: 99999
penprovided: true
destination: max_tcp_window

To Reproduce
Steps to reproduce the behavior:

  1. Run GoFlow2 with arguments '...'
  2. Receive samples '....'
  3. See error

Expected behavior
A clear and concise description of what you expected to happen.

Captures
If applicable, add output (JSON, protobuf), packet captures and device configuration.

Sampler device:

  • Brand: [e.g. Cisco, Juniper, Arista, Mikrotik]
  • Model: [e.g. MX, QFX]
  • Version: [e.g. 22]
  • Estimated flow traffic: [e.g. 5000 samples per second]

GoFlow2:

  • Version: [e.g. v2.0.0]
  • Environment: [e.g. Kubernetes, Docker, Debian package]
  • OS: [e.g. Linux Ubuntu Server 23.04]

Additional context
Add any other context about the problem here.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions