IP address fields in debug output are packed and therefor are packed when retrieved by the Kafka consumer about goflow

[lspgn]

Updated debug message. Now converting bytes into readable string.

[lspgn]

It is technically debug output and not meant to be pushed directly to logstash for analysis.
Right now, it is directly printing the protobuf. Since the IPs are bytes, it will be serialized as base64. I was hoping to improve this for clarity anyway.

[simPod]

@lspgn how would you decode it?

I serialized protobuf generated by goflow to json in php script:

{"Type":"SFLOW","TimeRecvd":1537348610,"SamplingRate":16383,"SequenceNum":2702862506,"TimeFlow":1537348610,"SrcIP":"uWbaPA==","DstIP":"uWbbjw==","IPversion":"IPv4","Bytes":1522,"Packets":1,"RouterAddr":"uWba/g==","NextHop":"lQ6PeQ==","SrcNet":27,"SrcIf":1000013,"DstIf":1000001,"Proto":6,"SrcPort":1918,"DstPort":34379,"IPTTL":64,"TCPFlags":16,"VlanId":970,"Etype":2048}

And when I take src ip uWbaPA== and try to decode it it seems like it's somehow corrupted 🤔

[lspgn]

The protobuf serializer will encode bytes directly into Base64.
I will take a look at improving this.

$ echo -n "uWbaPA==" | openssl enc -a -d -A | hexdump -C
00000000  b9 66 da 3c                                       |.f.<|
00000004

When you convert it
b9 66 da 3c => 185.102.218.60

[simPod]

Yup, got it. Thanks!