-
Notifications
You must be signed in to change notification settings - Fork 37
Open
Description
Hello, me again ;)
Found another little bugger in my test setup.
ipfixcol is forwarding to logstash via TCP. If there's too much load on logstash (TPC connection still alive), it somehow seems to drop/lost the templates or so (not sure) leading to messages not being processed (the whole logstash tcp receiving stack is bogus). Before ipfixcol as MITM it was working as the original sender we have is re-transmitting templates every x minutes even on TCP connections.
Does ipfixcol forward templates only when they are seen on a connection first? Or can we add something like the UDP resend setting for TCP also?
Metadata
Metadata
Assignees
Labels
No labels