FlowDirection is commented out

[fionera]

Currently the FlowDirection field is missing in the proto file because it was commented out

goflow2/pb/flow.proto

Line 20 in 99f3629

//uint32 flow_direction = 42;

[lspgn]

Hi @fionera
Thank you for raising the issue.

In an effort to reduce some fields that were only available in NetFlow/IPFIX, I ended up making flow direction configurable via the mapping file.

goflow2/cmd/goflow2/mapping.yaml

Lines 30 to 33 in 99f3629

	protobuf: # manual protobuf fields addition
	- name: flow_direction
	index: 42
	type: varint

The following should automatically add the direction

goflow2 -mapping mapping.yaml

Please note that v2.2.0 made some changes to the producer libraries to support custom parsing more programmatically.

Don't hesitate if you have more questions

[fionera]

I am using goflow as a library including the protofile. Is there any documentation on how to use this new way?

[lspgn]

Unfortunately, I didn't get around to write proper documentation.

But in short:

You need to use a TemplateMapper implementation.

To be passed to ConvertNetFlowDataSet function that decodes NetFlow/IPFIX.

Or if you want to call CreateProtoProducer, you need to use ProtoProducerConfig which wraps a TemplateMapper.

The CLI/app does a YAML configuration conversion to a structure with the Compile function but the recent changes were to make this more abstracted.

[fionera]

In my case I create the flow proto struct manually https://github.com/monogon-dev/NetMeta/blob/main/cmd/portmirror/iface.go#L135. So I guess CreateProtoProducer would be the way to go?