skip bytes / packets zeros

netobserv · Aug 7, 2023 · de53e15 · de53e15
1 parent 74611d2
commit de53e15
Showing 1 changed file with 8 additions and 2 deletions.
diff --git a/pkg/pipeline/decode/decode_protobuf.go b/pkg/pipeline/decode/decode_protobuf.go
@@ -40,13 +40,11 @@ func PBFlowToMap(flow *pbflow.Record) config.GenericMap {
 	}
 	out := config.GenericMap{
 		"FlowDirection":   int(flow.Direction.Number()),
-		"Bytes":           flow.Bytes,
 		"SrcAddr":         ipToStr(flow.Network.GetSrcAddr()),
 		"DstAddr":         ipToStr(flow.Network.GetDstAddr()),
 		"SrcMac":          macToStr(flow.DataLink.GetSrcMac()),
 		"DstMac":          macToStr(flow.DataLink.GetDstMac()),
 		"Etype":           flow.EthProtocol,
-		"Packets":         flow.Packets,
 		"Duplicate":       flow.Duplicate,
 		"Proto":           flow.Transport.GetProtocol(),
 		"TimeFlowStartMs": flow.TimeFlowStart.AsTime().UnixMilli(),
@@ -56,6 +54,14 @@ func PBFlowToMap(flow *pbflow.Record) config.GenericMap {
 		"AgentIP":         ipToStr(flow.AgentIp),
 	}
 
+	if flow.Bytes != 0 {
+		out["Bytes"] = flow.Bytes
+	}
+
+	if flow.Packets != 0 {
+		out["Packets"] = flow.Packets
+	}
+
 	proto := flow.Transport.GetProtocol()
 	if proto == syscall.IPPROTO_ICMP || proto == syscall.IPPROTO_ICMPV6 {
 		out["IcmpType"] = flow.GetIcmpType()