decoding samples with ethernet / mpls / etc #54
Description
I am observing that sample headers with ethernet->IP(4or6) ->TCP are decoded out of the box
but if the sample is a ethernet->MPLS(one or more) -> IP -> etc, those are decoded only on the ethernet header
is there an option to decode mpls labels up to bottom of the stack and then continue with IP and rest of the stack decoding as usual ?
example:
"samples":[{
"sampleType_tag":"0:1",
"sampleType":"FLOWSAMPLE",
"sampleSequenceNo":"3047279",
"sourceId":"0:386",
"meanSkipCount":"1000",
"samplePool":"3047279000",
"dropEvents":"0",
"inputPort":"386",
"outputPort":"759",
"elements":[{
"flowBlock_tag":"0:1",
"flowSampleType":"HEADER",
"headerProtocol":"1",
"sampledPacketSize":"1028",
"strippedBytes":"4",
"headerLen":"343",
"headerBytes":"D0-DC-2C-C6-F8-0A-D0-DC-2C-C7-04-25-88-47-00-30-91-3D-62-00-00-00-03-C6-06-3E-EB-10-00-02-00-00-00-00-00-00-00-00-00-00-00-01-EB-16-00-02-00-00-00-00-00-00-00-00-00-00-00-01-7D-19-D3-F6-00-00-00-00-00-00-00-00-50-00-00-00-84-F5-00-00-C6-3D-11-70-A8-1C-3F-3A-49-78-69-60-C8-00-11-A0-10-11-12-13-55-56-38-D3-03-94-1A-1B-1C-1D-1E-1F-20-21-22-23-24-25-26-27-28-29-2A-2B-2C-2D-2E-2F-30-31-32-33-34-35-36-37-38-39-3A-3B-3C-3D-3E-3F-40-41-42-43-44-45-46-47-48-49-4A-4B-4C-4D-4E-4F-50-51-52-53-54-55-56-57-58-59-5A-5B-5C-5D-5E-5F-60-61-62-63-64-65-66-67-68-69-6A-6B-6C-6D-6E-6F-70-71-72-73-74-75-76-77-78-79-7A-7B-7C-7D-7E-7F-80-81-82-83-84-85-86-87-88-89-8A-8B-8C-8D-8E-8F-90-91-92-93-94-95-96-97-98-99-9A-9B-9C-9D-9E-9F-A0-A1-A2-A3-A4-A5-A6-A7-A8-A9-AA-AB-AC-AD-AE-AF-B0-B1-B2-B3-B4-B5-B6-B7-B8-B9-BA-BB-BC-BD-BE-BF-C0-C1-C2-C3-C4-C5-C6-C7-C8-C9-CA-CB-CC-CD-CE-CF-D0-D1-D2-D3-D4-D5-D6-D7-D8-D9-DA-DB-DC-DD-DE-DF-E0-E1-E2-E3-E4-E5-E6-E7-E8-E9-EA-EB-EC-ED-EE-EF-F0-F1-F2-F3-F4-F5-F6-F7-F8-F9-FA-FB-FC-FD-FE-FF-00-01-02-03-04-05-06-07-08",
"dstMAC":"d0dc2cc6f80a",
"srcMAC":"d0dc2cc70425",
"ethernet_type":"34887"
}
]
}
]
}
header bytes would translate to the figure, but only Ethernet gets to show.
