19 releases 20 tags

RSS feed

• v0.1.17 bb89de4692

  Compare

  v0.1.17 Stable

  StefanSA released this 2026-07-22 11:11:10 +02:00 | 0 commits to main since this release

  v0.1.17 - 2026-07-22

  Fixed

  • Scoped NetFlow v9 and IPFIX templates by exporter UDP source port together
    with the source/observation domain, preventing template state from crossing
    exporter transport contexts.
  • Kept NetFlow v9 and IPFIX Options records metadata-only so scopes, exporter
    addresses, application metadata, and option values cannot create false flow
    byte, packet, address, port, sampling, or timestamp fields.
  • Preserved the explicit NetFlow v9 scope namespace
    netflow.v9.scope.<scope-type> and kept scope fields out of ordinary
    Information Element normalization.
  • Prevented enterprise IPFIX Information Elements from inheriting IANA aliases
    solely because their numeric IDs match.
  • Removed proven false aliases where flow totals, exported counters, sampler
    identifiers/modes, interfaces, timestamps, VLAN identifiers, or TCP fields
    were promoted to unrelated canonical fields.
  • Added standards-compliant one-to-eight-byte IPFIX reduced-size integer
    decoding, signed sign extension, fixed-zero-length template rejection, and
    millisecond timestamp overflow protection.
  • Changed sFlow exporter identity to the datagram agent_address and sub-agent
    context instead of the UDP relay address.
  • Restricted sFlow sampled-header tuple decoding to the declared Ethernet,
    IPv4, or IPv6 header protocol and rejected invalid protocol/port promotion.

  Compatibility

  • Existing legitimate NetFlow v5, NetFlow v9, and IPFIX byte/packet decoding
    remains unchanged.
  • NetFlow v9 application metadata remains available while Options records stay
    outside traffic normalization.
  • sFlow sampling remains applied exactly once.
  • The canonical audit, fixtures, pre/post evidence, runtime queries, and audit
    matrix are recorded at
    docs/audits/flowcollector-go/wire-to-canonical-conformance-20260722.md in
    the governed platform documentation tree.

  Known limitations

  • Some Cisco NetFlow v5 wire semantics, PEN 4300 aliases, NetFlow v9 vendor
    extensions, and later sFlow extensions remain REFERENCE_MISSING.
  • NetFlow v9 Count, padding, packet-sequence, and non-standard withdrawal
    behavior remains incomplete.
  • IPFIX UDP template lifecycle and NTP fractional timestamp behavior remains
    incomplete.
  • sFlow counter samples are parsed but not runtime-dispatched; some interface
    formats and extended records remain unsupported or unproven.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • checksums.txt
    2 downloads · 2026-07-22 11:17:48 +02:00 · 618 B
  • container-image-digest.txt
    2 downloads · 2026-07-22 11:17:48 +02:00 · 71 B
  • container-image.txt
    2 downloads · 2026-07-22 11:17:48 +02:00 · 411 B
  • flowcollector-go_0.1.17_amd64.deb
    1 download · 2026-07-22 11:17:48 +02:00 · 4.5 MiB
  • flowcollector-go_0.1.17_amd64.rpm
    1 download · 2026-07-22 11:17:48 +02:00 · 4.6 MiB
  • flowcollector-go_0.1.17_arm64.deb
    1 download · 2026-07-22 11:17:48 +02:00 · 4.1 MiB
  • flowcollector-go_0.1.17_arm64.rpm
    1 download · 2026-07-22 11:17:48 +02:00 · 4.2 MiB
  • flowcollector-go_0.1.17_linux_amd64.tar.gz
    1 download · 2026-07-22 11:17:48 +02:00 · 4.4 MiB
  • flowcollector-go_0.1.17_linux_arm64.tar.gz
    1 download · 2026-07-22 11:17:48 +02:00 · 4.1 MiB