I'm quite sure there is something not right with the output. A standard IPFIX output looks like this: ID:301 - 10.0.0.2:4242->10.0.0.3:80 P:17 IF/OF:3/5 00:10:58 64 Sophos output: ID:256 - 100.1.0.5:8262->100.1.0.12:80 P:6 IF/OF:0/0 00:10:55 336 The interface ifindex ID is missing.
↧