Hi there,
I want to capture netflow an sflow.
So I installed:
nfdump-1.6.9
/configure --enable-sflow --enable-nfprofile --enable-nftrack
nfsen-1.3.6p1
On my Linux Notebook I installed ipt_NETFLOW
and hsflowd for testing.
Netflows are capured, but nor sflow.
hsflow.conf:
DNSSD = off
collector {
ip = 10.66.20.204
udpport = 2057
}
On 10.66.20.204 nfsen.conf:
%sources = (
'credne_netflow' => { 'port' => '2055', 'col' => '#0000ff',
'type' => 'netflow' },
'credne_sflow' => { 'port' => '2057', 'col' => '#ff0000', 'type'
=> 'sflow' },
'switch_sflow' => { 'port' => '2056', 'col' => '#4b0082', 'type'
=> 'sflow' },
);
ps says:
nfsen 26635 0.0 0.0 17088 2632 ? S 14:02 0:00
/bin/sfcapd -w -D -p 2056 -u nfsen -g omd -B 200000 -S 1 -P
/usr/local/nfsen/var/run/p2056.pid -z -I switch_sflow -l
/usr/local/nfsen/profiles-data/live/switch_sflow
nfsen 26642 0.0 0.0 17088 2628 ? S 14:02 0:00
/bin/sfcapd -w -D -p 2057 -u nfsen -g omd -B 200000 -S 1 -P
/usr/local/nfsen/var/run/p2057.pid -z -I credne_sflow -l
/usr/local/nfsen/profiles-data/live/credne_sflow
nfsen 26651 0.0 0.0 18172 2760 ? S 14:02 0:00
/bin/nfcapd -w -D -p 2055 -u nfsen -g omd -B 200000 -S 1 -P
/usr/local/nfsen/var/run/p2055.pid -z -I credne_netflow -l
/usr/local/nfsen/profiles-data/live/credne_netflow
The data in
profiles-data/live/credne_sflow/2013/05/15/
are all 276 bit.
Any clue where the problem is?
Thanks
--
Mit freundlichen Grüßen
Frank Meier
UNIX-Basis
Hamm Reno Group GmbH
Industriegebiet West | D-66987 Thaleischweiler-Fröschen
T.: +496334 444-8322
frank.me...@hr-group.de | www.reno.de
___________________________________________________________________
Sitz: Am Tie 7 | D-49086 Osnabrück
Handelsregister Osnabrück HRB 19587
Geschäftsführer: Hans-Jürgen de Fries,
Jens Gransee, Manfred Klumpp, Robert Reisch, Uwe Niemann,
Jens Rauschen, Uwe Wesemann
Diese E-Mail sowie eventuelle Anhänge enthalten vertrauliche und / oder
rechtlich geschützte Informationen. Wenn Sie nicht der richtige Adressat
sind
oder diese E-Mail irrtümlich erhalten haben, informieren Sie bitte
sofort den
Absender und vernichten Sie diese Mail. Das unerlaubte Kopieren oder
Speichern
sowie die unbefugte Weitergabe dieser E-Mail sind nicht gestattet.
This e-mail and any attachments may contain confidential and / or privileged
information. If you are not the intended recipient or have received this
e-mail in error, please notify the sender immediately and destroy this
e-mail
. Any unauthorized copying, storing, disclosure or distribution of the
contents of this e-mail is strictly forbidden.
------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d
_______________________________________________
Nfsen-discuss mailing list
Nfsen-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
