{"action":"created","issue":{"url":"https://api.github.com/repos/aabc/ipt-netflow/issues/36","labels_url":"https://api.github.com/repos/aabc/ipt-netflow/issues/36/labels{/name}","comments_url":"https://api.github.com/repos/aabc/ipt-netflow/issues/36/comments","events_url":"https://api.github.com/repos/aabc/ipt-netflow/issues/36/events","html_url":"https://github.com/aabc/ipt-netflow/issues/36","id":66222898,"number":36,"title":"Implement MPLS labeled packet receive in promisc mode","user":{"login":"mzi77","id":11790235,"avatar_url":"https://avatars.githubusercontent.com/u/11790235?v=3","gravatar_id":"","url":"https://api.github.com/users/mzi77","html_url":"https://github.com/mzi77","followers_url":"https://api.github.com/users/mzi77/followers","following_url":"https://api.github.com/users/mzi77/following{/other_user}","gists_url":"https://api.github.com/users/mzi77/gists{/gist_id}","starred_url":"https://api.github.com/users/mzi77/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mzi77/subscriptions","organizations_url":"https://api.github.com/users/mzi77/orgs","repos_url":"https://api.github.com/users/mzi77/repos","events_url":"https://api.github.com/users/mzi77/events{/privacy}","received_events_url":"https://api.github.com/users/mzi77/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":54,"created_at":"2015-04-03T20:33:13Z","updated_at":"2015-05-07T16:07:19Z","closed_at":null,"body":"Please implement MPLS labeled packet receive in promisc mode, should be ease modification of promisc_rcv(), now MPLS labeled unicast IPv6/IPv4 packets are droped. Maybe I will create patch for it."},"comment":{"url":"https://api.github.com/repos/aabc/ipt-netflow/issues/comments/99923540","html_url":"https://github.com/aabc/ipt-netflow/issues/36#issuecomment-99923540","issue_url":"https://api.github.com/repos/aabc/ipt-netflow/issues/36","id":99923540,"user":{"login":"mzi77","id":11790235,"avatar_url":"https://avatars.githubusercontent.com/u/11790235?v=3","gravatar_id":"","url":"https://api.github.com/users/mzi77","html_url":"https://github.com/mzi77","followers_url":"https://api.github.com/users/mzi77/followers","following_url":"https://api.github.com/users/mzi77/following{/other_user}","gists_url":"https://api.github.com/users/mzi77/gists{/gist_id}","starred_url":"https://api.github.com/users/mzi77/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mzi77/subscriptions","organizations_url":"https://api.github.com/users/mzi77/orgs","repos_url":"https://api.github.com/users/mzi77/repos","events_url":"https://api.github.com/users/mzi77/events{/privacy}","received_events_url":"https://api.github.com/users/mzi77/received_events","type":"User","site_admin":false},"created_at":"2015-05-07T16:07:19Z","updated_at":"2015-05-07T16:07:19Z","body":"Experimental bit is used for QoS in MPLS - it's similar to CoS bits in vlan tag. I think decapsulation of EoMPLS is pretty hard, because payload could be pure L2 protocol, Eg. spanning tree, LLDP, ARP etc. It can be even MPLS packet, when you are providing PW as L2 transport for some customer, which is using MPLS in his network. I guess, that wireshark is doing some heuristics on that as you suggested. I will send you some exports from other probes, I think they are reporting only labels fields and no IP fields in flows, but I must confirm that. We have state holiday tomorrow, so maybe on Monday."}}