RE: sflow - ifindex parsing

From: Peter Phaal <peter.phaal@inmon.com>
Date: 04/19/07
Message-ID: <010601c7829d$4c52a730$3200000a@PHAALPC>

Take a look at the comment describing the interface typedef in the sFlow
version 5 specification:
http://www.sflow.org/SFLOW-DATAGRAM5.txt

0x3FFFFFFF is used to indicate packets to or from the management agent
within the switch (typically SNMP, spanning tree or routing protocol
packets).

Peter

-----Original Message-----
From: owner-sflow@sflow.org [mailto:owner-sflow@sflow.org] On Behalf Of
L.Ramkumar
Sent: Thursday, April 19, 2007 3:31 AM
To: sflow@sflow.org
Subject: [sFlow] sflow - ifindex parsing

 Hi All,

Recently I enabled sFlow on HP Procurve 2800 series switch. While parsing
the sFlow packets I found a big Ifindex value (3F FF FF FF). I know
Ifindex can not have this(1073741823) value. I have given the packet
dump also. Am i missing something? Please help me.

Regards
Ram

000 00 18 8b ad bc 3b 00 01 e7 94 06 01 08 00 45 00 .....;.. ......E.
0010 04 e8 a2 54 00 00 3f 11 70 00 c0 a8 6e 03 c0 a8 ...T..?.
p...n...
0020 75 5c 04 08 27 0c 04 d4 19 40 00 00 00 05 00 00 u\..'...
.@......
0030 00 01 c0 a8 6e 03 00 00 00 00 00 29 ce e9 7d be ....n...
...)..}.
0040 63 fa 00 00 00 08 00 00 00 01 00 00 00 90 00 1f c.......
........
0050 9b e9 00 00 00 35 00 00 01 00 74 27 6f 4e 00 13 .....5..
..t'oN..
0060 70 27 00 00 00 2f 3f ff ff ff 00 00 00 01 00 00 p'.../?.
........
0070 00 01 00 00 00 68 00 00 00 01 00 00 00 60 00 00 .....h..
.....`..
0080 00 08 00 00 00 58 00 16 35 be 17 40 00 01 e7 94 .....X..
5..@....
0090 06 01 08 00 45 00 00 4a 00 00 40 00 3f 11 48 36 ....E..J
..@.?.H6
00a0 c0 a8 04 19 c0 a8 6e 03 80 13 00 a1 00 36 d1 73 ......n.
.....6.s
00b0 30 2c 02 01 01 04 07 54 57 35 34 35 51 46 a1 1e 0,.....T
W545QF..
00c0 02 04 01 9e 4c 8f 02 01 00 02 01 00 30 10 30 0e ....L...
....0.0.
00d0 06 0a 2b 06 01 02 01 02 02 01 14 30 05 00 00 00 ..+.....
...0....
00e0 00 01 00 00 00 74 00 00 ae 2d 00 00 00 0d 00 00 .....t..
.-......
00f0 01 00 01 8d e4 c0 00 00 6f 1d 00 00 00 0d 00 00 ........
o.......
0100 00 30 00 00 00 01 00 00 00 01 00 00 00 4c 00 00 .0......
.....L..
0110 00 01 00 00 00 40 00 00 00 04 00 00 00 3c 00 01 .....@..
.....<..
0120 e7 94 06 01 00 0f 1f a3 c8 a8 08 00 45 00 00 28 ........
....E..(
0130 8c 64 40 00 80 06 0e fa c0 a8 6e 4d c0 a8 6f d3 .d@.....
..nM..o.
0140 05 27 00 50 5a 06 f5 c1 c4 c2 34 a9 50 10 ff ff .'.PZ...
..4.P...
0150 01 b8 00 00 00 00 00 00 00 00 00 00 00 01 00 00 ........
........
0160 00 74 00 1f 9b ea 00 00 00 35 00 00 01 00 74 27 .t......
.5....t'
0170 6f 4e 00 13 77 7e 00 00 00 0d 00 00 00 30 00 00 oN..w~..
.....0..
0180 00 01 00 00 00 01 00 00 00 4c 00 00 00 01 00 00 ........
.L......
0190 00 40 00 00 00 04 00 00 00 3c 00 01 e7 94 06 01 .@......
.<......
01a0 00 0f 1f a3 c8 a8 08 00 45 00 00 28 8c 64 40 00 ........
E..(.d@.
01b0 80 06 0e fa c0 a8 6e 4d c0 a8 6f d3 05 27 00 50 ......nM
..o..'.P
01c0 5a 06 f5 c1 c4 c2 34 a9 50 10 ff ff 01 b8 00 00 Z.....4.
P.......
01d0 00 00 00 00 00 00 00 00 00 01 00 00 00 b8 00 1f ........
........
01e0 9b eb 00 00 00 35 00 00 01 00 74 27 73 97 00 13 .....5..
..t's...
01f0 70 29 00 00 00 2f 00 00 00 1f 00 00 00 01 00 00 p).../..
........
0200 00 01 00 00 00 90 00 00 00 01 00 00 05 f2 00 00 ........
........
0210 00 08 00 00 00 80 00 12 3f 17 96 06 00 01 e7 94 ........
?.......
0220 06 01 08 00 45 00 05 dc 7e 87 40 00 3f 06 c2 f1 ....E...
~.@.?...
0230 c0 a8 04 9e c0 a8 6e b4 00 50 d7 18 23 cb 64 22 ......n.
.P..#.d"
0240 5d 3e 9b 3c 80 10 1a e8 49 42 00 00 01 01 08 0a ]>.<....
IB......
0250 26 28 5f c0 00 41 b3 c2 cc 0e 32 49 b1 24 2f 5d &(_..A..
..2I.$/]
0260 8f 50 37 45 0f ea 45 3d 04 ee 58 89 a9 a1 ef 3a .P7E..E=
..X....:
0270 77 f3 93 db d8 09 04 32 e3 5c df 27 ac 8a bd 29 w......2
.\.'...)
0280 32 58 ac bc 6f 47 27 83 30 70 31 53 a1 af dc 87 2X..oG'.
0p1S....
0290 48 4e ac bc 80 7d 00 00 00 01 00 00 00 7c 00 1f HN...}..
.....|..
02a0 9b ec 00 00 00 35 00 00 01 00 74 27 73 97 00 13 .....5..
..t's...
02b0 77 7e 00 00 00 1f 00 00 00 30 00 00 00 01 00 00 w~......
.0......
02c0 00 01 00 00 00 54 00 00 00 01 00 00 00 46 00 00 .....T..
.....F..
02d0 00 04 00 00 00 44 00 01 e7 94 06 01 00 12 3f 17 .....D..
......?.
02e0 96 06 08 00 45 00 00 34 6a 6c 40 00 40 06 db b4 ....E..4 jl@.@...
02f0 c0 a8 6e b4 c0 a8 04 9e d7 18 00 50 5d 3e 9b 3c ..n.....
...P]>.<
0300 23 cb 69 ca 80 10 0f a6 da f1 00 00 01 01 08 0a #.i.....
........
0310 00 41 b3 df 26 28 5f c0 00 00 00 00 00 02 00 00 .A..&(_.
........
0320 00 a8 00 02 b7 97 00 00 00 1f 00 00 00 02 00 00 ........
........
0330 00 01 00 00 00 58 00 00 00 1f 00 00 00 06 00 00 .....X..
........
0340 00 00 3b 9a ca 00 00 00 00 01 00 00 00 03 00 00 ..;.....
........
0350 00 02 22 52 c4 c5 01 d5 3c 33 00 00 08 37 00 00 .."R....
<3...7..
0360 67 ea 00 00 00 00 00 00 00 14 00 00 00 00 00 00 g.......
........
0370 00 0b d4 3b a2 3c 02 88 eb 34 00 32 39 a6 00 83 ...;.<..
.4.29...
0380 0c 8e 00 00 4c 67 00 00 00 00 00 00 00 00 00 00 ....Lg..
........
0390 00 02 00 00 00 34 00 00 00 00 00 00 00 14 00 00 .....4..
........
03a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........
........
03b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........
........
03c0 00 00 00 00 00 00 00 00 00 01 00 00 00 02 00 00 ........
........
03d0 00 a8 00 02 b7 f2 00 00 00 2b 00 00 00 02 00 00 ........
.+......
03e0 00 01 00 00 00 58 00 00 00 2b 00 00 00 06 00 00 .....X..
.+......
03f0 00 00 3b 9a ca 00 00 00 00 01 00 00 00 03 00 00
Received on Thu Apr 19 09:12:01 2007

This archive was generated by hypermail 2.1.8 : 04/19/07 PDT