{"action":"created","issue":{"url":"https://api.github.com/repos/CESNET/ipfixcol/issues/118","repository_url":"https://api.github.com/repos/CESNET/ipfixcol","labels_url":"https://api.github.com/repos/CESNET/ipfixcol/issues/118/labels{/name}","comments_url":"https://api.github.com/repos/CESNET/ipfixcol/issues/118/comments","events_url":"https://api.github.com/repos/CESNET/ipfixcol/issues/118/events","html_url":"https://github.com/CESNET/ipfixcol/issues/118","id":97452481,"number":118,"title":"Data records for options templates (converted from NFv9) do not increase sequence number","user":{"login":"SecDorks-Kirc","id":10336727,"avatar_url":"https://avatars.githubusercontent.com/u/10336727?v=3","gravatar_id":"","url":"https://api.github.com/users/SecDorks-Kirc","html_url":"https://github.com/SecDorks-Kirc","followers_url":"https://api.github.com/users/SecDorks-Kirc/followers","following_url":"https://api.github.com/users/SecDorks-Kirc/following{/other_user}","gists_url":"https://api.github.com/users/SecDorks-Kirc/gists{/gist_id}","starred_url":"https://api.github.com/users/SecDorks-Kirc/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/SecDorks-Kirc/subscriptions","organizations_url":"https://api.github.com/users/SecDorks-Kirc/orgs","repos_url":"https://api.github.com/users/SecDorks-Kirc/repos","events_url":"https://api.github.com/users/SecDorks-Kirc/events{/privacy}","received_events_url":"https://api.github.com/users/SecDorks-Kirc/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":12,"created_at":"2015-07-27T12:31:07Z","updated_at":"2016-02-23T14:36:17Z","closed_at":null,"body":"Although we discovered the issue in the particular case of converting options templates from NFv9, the issue is more generic: the code in `insert_timestamp_template` and `insert_timestamp_data`, which keeps track of the sequence numbers during conversion, only works if data records feature timestamps (field ID 21 and 22). This is however not a given, especially not for options templates.\r\n\r\nTraces for reproduction can be provided upon request."},"comment":{"url":"https://api.github.com/repos/CESNET/ipfixcol/issues/comments/187721917","html_url":"https://github.com/CESNET/ipfixcol/issues/118#issuecomment-187721917","issue_url":"https://api.github.com/repos/CESNET/ipfixcol/issues/118","id":187721917,"user":{"login":"jepries","id":10326075,"avatar_url":"https://avatars.githubusercontent.com/u/10326075?v=3","gravatar_id":"","url":"https://api.github.com/users/jepries","html_url":"https://github.com/jepries","followers_url":"https://api.github.com/users/jepries/followers","following_url":"https://api.github.com/users/jepries/following{/other_user}","gists_url":"https://api.github.com/users/jepries/gists{/gist_id}","starred_url":"https://api.github.com/users/jepries/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jepries/subscriptions","organizations_url":"https://api.github.com/users/jepries/orgs","repos_url":"https://api.github.com/users/jepries/repos","events_url":"https://api.github.com/users/jepries/events{/privacy}","received_events_url":"https://api.github.com/users/jepries/received_events","type":"User","site_admin":false},"created_at":"2016-02-23T14:36:17Z","updated_at":"2016-02-23T14:36:17Z","body":"I think I see the problem.  Line 644 of convert.c, you are looking for enterprise ID's in a NFv9 template.  The ID's incoming from the PfR Export we know have ID's > 32768 which would be artificially setting the enterprise bit.  This then corrupts the template as the counts go wonky.  I don't believe NFv9 (according to http://www.cisco.com/en/US/technologies/tk648/tk362/technologies_white_paper09186a00800a3db9.pdf) contains enterprise ID's in options templates.  I will try bypassing this logic, but I think we are going to have to add the logic you have to remap those large element id's and insert the all 1's enterprise id?\r\n\r\nI'll work on it this weekend (only time I get to play with this) and see if I can fix it."}}