bug(flow-collector): not handling sFlow packets correctly #1114

New issue

Open

opened 2026-03-28 04:31:48 +00:00 by mfreeman451 · 2 comments

mfreeman451 commented

2026-03-28 04:31:48 +00:00

Owner

Imported from GitHub.

Original GitHub issue: #3073
Original author: @mfreeman451
Original URL: https://github.com/carverauto/serviceradar/issues/3073
Original created: 2026-03-25T02:30:09Z

Describe the bug

flow-collector [2026-03-25T02:27:29Z WARN  flow_collector::netflow] Failed to parse NetFlow packet from 192.168.10.154:60983: Incomplete { available: 1192, context: "packet too short or unrecognized version for scoping" }                                                                                                                                                                 flow-collector [2026-03-25T02:27:31Z WARN  flow_collector::netflow] Failed to parse NetFlow packet from 192.168.10.154:60983: Incomplete { available: 916, context: "packet too short or unrecognized version for scoping" }
flow-collector [2026-03-25T02:27:34Z WARN  flow_collector::netflow] Failed to parse NetFlow packet from 192.168.10.154:60983: Incomplete { available: 556, context: "packet too short or unrecognized version for scoping" }
flow-collector [2026-03-25T02:27:36Z WARN  flow_collector::netflow] Failed to parse NetFlow packet from 192.168.10.154:60983: Incomplete { available: 1028, context: "packet too short or unrecognized version for scoping" }

To Reproduce
Steps to reproduce the behavior:

Go to '...'
Click on '....'
Scroll down to '....'
See error

Expected behavior
A clear and concise description of what you expected to happen.

Screenshots
If applicable, add screenshots to help explain your problem.

Desktop (please complete the following information):

OS: [e.g. iOS]
Browser [e.g. chrome, safari]
Version [e.g. 22]

Smartphone (please complete the following information):

Device: [e.g. iPhone6]
OS: [e.g. iOS8.1]
Browser [e.g. stock browser, safari]
Version [e.g. 22]

Additional context
Add any other context about the problem here.

Imported from GitHub. Original GitHub issue: #3073 Original author: @mfreeman451 Original URL: https://github.com/carverauto/serviceradar/issues/3073 Original created: 2026-03-25T02:30:09Z --- **Describe the bug** ``` flow-collector [2026-03-25T02:27:29Z WARN flow_collector::netflow] Failed to parse NetFlow packet from 192.168.10.154:60983: Incomplete { available: 1192, context: "packet too short or unrecognized version for scoping" } flow-collector [2026-03-25T02:27:31Z WARN flow_collector::netflow] Failed to parse NetFlow packet from 192.168.10.154:60983: Incomplete { available: 916, context: "packet too short or unrecognized version for scoping" } flow-collector [2026-03-25T02:27:34Z WARN flow_collector::netflow] Failed to parse NetFlow packet from 192.168.10.154:60983: Incomplete { available: 556, context: "packet too short or unrecognized version for scoping" } flow-collector [2026-03-25T02:27:36Z WARN flow_collector::netflow] Failed to parse NetFlow packet from 192.168.10.154:60983: Incomplete { available: 1028, context: "packet too short or unrecognized version for scoping" } ``` **To Reproduce** Steps to reproduce the behavior: 1. Go to '...' 2. Click on '....' 3. Scroll down to '....' 4. See error **Expected behavior** A clear and concise description of what you expected to happen. **Screenshots** If applicable, add screenshots to help explain your problem. **Desktop (please complete the following information):** - OS: [e.g. iOS] - Browser [e.g. chrome, safari] - Version [e.g. 22] **Smartphone (please complete the following information):** - Device: [e.g. iPhone6] - OS: [e.g. iOS8.1] - Browser [e.g. stock browser, safari] - Version [e.g. 22] **Additional context** Add any other context about the problem here.

mfreeman451 added the

netflow

label

2026-03-28 04:31:48 +00:00

mfreeman451 commented

2026-03-28 04:31:48 +00:00

Author

Owner

Imported GitHub comment.

Original author: @mfreeman451
Original URL: https://github.com/carverauto/serviceradar/issues/3073#issuecomment-4122713309
Original created: 2026-03-25T02:32:10Z

flow-collector [2026-03-25T02:31:46Z INFO  flow_collector::metrics] [sflow@0.0.0.0:6343] packets_received: 0, flows_converted: 0, flows_dropped: 0, parse_errors: 0
flow-collector [2026-03-25T02:31:46Z INFO  flow_collector::metrics] [netflow@0.0.0.0:2055] packets_received: 154053, flows_converted: 110748, flows_dropped: 0, parse_errors: 102007

Imported GitHub comment. Original author: @mfreeman451 Original URL: https://github.com/carverauto/serviceradar/issues/3073#issuecomment-4122713309 Original created: 2026-03-25T02:32:10Z --- ``` flow-collector [2026-03-25T02:31:46Z INFO flow_collector::metrics] [sflow@0.0.0.0:6343] packets_received: 0, flows_converted: 0, flows_dropped: 0, parse_errors: 0 flow-collector [2026-03-25T02:31:46Z INFO flow_collector::metrics] [netflow@0.0.0.0:2055] packets_received: 154053, flows_converted: 110748, flows_dropped: 0, parse_errors: 102007 ```

mfreeman451 commented

2026-03-28 04:31:49 +00:00

Author

Owner

Imported GitHub comment.

Original author: @mfreeman451
Original URL: https://github.com/carverauto/serviceradar/issues/3073#issuecomment-4122717360
Original created: 2026-03-25T02:33:14Z

I need to do a tcpdump and see if this aruba is trying to send sflow to the netflow port, will update this after I find out.

Imported GitHub comment. Original author: @mfreeman451 Original URL: https://github.com/carverauto/serviceradar/issues/3073#issuecomment-4122717360 Original created: 2026-03-25T02:33:14Z --- I need to do a tcpdump and see if this aruba is trying to send sflow to the netflow port, will update this after I find out.