pmacct-discussion  

[pmacct-discussion] Multiple interfaces and netflow

Jim Archer
Sat, 10 May 2008 01:38:54 -0700

Hi All...

I am trying to use pmacct on a Vyatta router to generate netflow, to be 
collected by Netflow Analyzer by ManageEngine.  The operating system is 
Debian Lenny.

I installed the pmacct package from Lenny and had no trouble setting it up. 
I used the Debian method of setting the environment variable to "eth0 eth1 
eth2" because those are the interfaces I want to monitor.  I provided a 
conf file for each interface, names appropriately.

Staring pmacct using the script in init.d results in 6 processes, 
apparently two for each interface.  Also, netstat shows three udp sessions 
to the IP that the Netflow app resides on, on the correct port.

But there is a problem.  Netflow shows that there is data but only from one 
interface.  It shows data in only, none out.  If I use a Cisco 7200 to 
generate netflow, Netflow Analyzer shows all the interfaces in each flow.

I have checked a bunch of things, all with no luck. Does anyone have any 
idea what I might have done wrong?

Thanks very much...

Jim


_______________________________________________
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists