Interface ID
Brought to you by:
vlm
Menu
▾
▴
Wireshark dump for ipcad
This functionality was fixed in my configuration with the following setting in ipcad.conf
netflow ifclass eth mapto 00-99
I have checked the source, it seems you need to set "capture-ports" to enable. Even though the inline documentation of ipcad.conf states that NetFlow operation is not affected by this setting, the source files say in process.c in function process_packet_data:
** if(conf->capture_ports)** { if(iface_in) { memcpy(flow.ifInName, iface_in, IFNAMSIZ); flow.ifInName[IFNAMSIZ-1] = 0; flow.ifInIndex = iface_to_snmp_id(flow.ifInName); } else { flow.ifInName[0] = '\0'; flow.ifInIndex = ps->ifIndex; } if(iface_out) { memcpy(flow.ifOutName, iface_out, IFNAMSIZ); flow.ifOutName[IFNAMSIZ-1] = 0; flow.ifOutIndex = iface_to_snmp_id(flow.ifOutName); } else { flow.ifOutName[0] = '\0'; flow.ifOutIndex = -1; } } else { flow.ifInName[0] = '\0'; flow.ifOutName[0] = '\0'; ** flow.ifOutIndex = -1;** flow.ifInIndex = -1; }Changing the capture-ports setting to enabled fixed the problem, netflow capture included interfaces indexed the same as on the ipcad configuration file.