Somehow I doubt that nfcapd can start two processes on the same UDP port.
As far as I know, the OS will not let it. Are you sure running a single
collector with multiple sources is possible the way you want it?
On Wed, Mar 27, 2013 at 4:26 AM, Jason Biel ja...@biel-tech.com wrote:
Currently
Hi Rick,
On 3/24/13 W12 6:43, r.j.hofst...@utwente.nl wrote:
Dear all,
Sorting by the start time of flow records using -m has been deprecated in
nfdump as of 1.6.8. The new preferred way for sorting is using -O tstart. Is
there a best-practice for NfSen plugins? What happens if a plugin
Hi Jason,
Actually this should work. Could you please send me a ps output off list from
your system such as
ps auxww | grep nfcapd
When configuring the same port for different source, NfSen should recognise
this and should start the collector
accordingly with multiple -n options.
nfcapd can
Well I'll be damned, I sent that email before leaving the office
yesterday. Both the sources not displaying statistics had been in nfSen
for at least 2-3hrs if not moreI come in the morning and I have
statistics now for them related to flows/s etc.
Is there a time frame outside of the
On 3/27/13 W13 11:46, Jason Biel wrote:
Well I'll be damned, I sent that email before leaving the office yesterday.
Both the sources not displaying statistics
had been in nfSen for at least 2-3hrs if not moreI come in the morning
and I have statistics now for them related to
flows/s
On 3/27/13 W13 12:22, Jason Biel wrote:
The nfsen profiles directory is on NFS, binaries and such are on the local
system. Is that usually an issue?
It should not - no. But it was the only option, I could guess of, that for some
reason the data did not appear. But I
can't tell, what was
I'll keep an eye on it as I add some more sources. If anything, I can move
it back to local disk and see if the same issue happens there.
On Wed, Mar 27, 2013 at 8:06 AM, Peter Haag ph...@users.sourceforge.netwrote:
On 3/27/13 W13 12:22, Jason Biel wrote:
The nfsen profiles directory is
Hi,
I am using nfsen 1.3.6p1 on CentOS 5.9 x86_64 with nfdump 1.6.6.
I have noticed that only inbound traffic is recorded. The exporting
device is a Cisco 3825. Below is the IOS configuration as well as that
of one interface and its subinterfaces.
I thought that it is enough to set:
ip
