Hi, Current NetFlow V9/IPFIX dissector treats IN_BYTES (IE=1) and IN_PERMANENT_BYTES (IE=85) exactly in the same way. The same applies to IN_PKTS (IE=2) and IN_PERMANENT_PKTS (IE=86). However, IN_BYTES/IN_PKTS and IN_PERMANENT_BYTES/IN_PERMANENT_PKTS have different semantics so they should be distinguishable when they are displayed or specified in a filter. Please find attached the patch which does that.
Regards, --- Motonori Shindo
netflowv9_permanent_ies.diff
Description: Binary data
___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev@wireshark.org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe