Trying out the new IPFIX input in 3.2 by sending data from a Sophos UTM. Seeing this in server.log: 2020-02-05T21:06:05.013-05:00 ERROR [DecodingProcessor] Unable to decode raw message RawMessage{id=3b402050-4885-11ea-808a-000c29404c16, journalOffset=393119342, codec=ipfix, payloadSize=745, times…

IPFIX from Sophos UTM

maniel (Daniel) February 10, 2020, 7:07am 15

I’m not as lucky as @SteveU and can’t find fields for enterprise number 11256 to create an yml, can i somehow create an yml just from reading a pcap in wireshark?

Topic		Replies	Views
Problem with odd flows packets Graylog Central (peer support)	1	451	November 30, 2020
Daily Challenge: IPFIX Input issue Graylog Tech Challenges	15	2191	July 6, 2021
Graylog input with Citrix ipfix Graylog Central (peer support)	2	698	April 2, 2021
Graylog integration with SophosUTM, date format exception Graylog Central (peer support)	2	623	September 22, 2017
Error processing message Graylog Central (peer support)	4	3564	May 2, 2018

IPFIX from Sophos UTM

Related topics