Vlan id, no dst+src vlan

[simPod]

I was comparing flows received by this library and by nfcapd. It seems to me that in VlanId is the same content as would normally be in srcVlan field. Why is goflow designed to have VlanId only and not both src+dst vlan?

[lspgn]

I started implementing this setting with sFlow, which only shows the current 802.1q VLAN.
I'm assuming you're using NetFlow/IPFIX. Do you have samples I could use? Or could you give me the field IDs you're seeing?

Thank you

[simPod]

In nfdump, the fields are %svln and %dvln (caught by sfcapd, not nfcap). About the samples I'm sending you the email.

[lspgn]

I was thinking of the field id in the protocol specification.
Thank you!

[simPod]

Hm, didn't find any list or something that would look like that 🤔 Found the spec @ https://sflow.org/sflow_version_5.txt, there it is in extended_switch struct but no id, just unsigned int src_vlan.

Was also checking nfdump source code where there are references to constants I found in this file that led me here and that matches these. So possibly 58 and 59 for src and dst vlan?

[lspgn]

58 and 59 sounds indeed like default IPFIX https://www.iana.org/assignments/ipfix/ipfix.xhtml
Will implement it.

[lspgn]

Added vlan fields in the protobuf (dbb683e).

Feel free to re-open if there is any issue.