I figured out my problem; the IOS upgrade was a red herring. At some point, rp_filter must have become set again. The box I'm running flow-capture on has multiple interfaces, one of which is on the same subnet as the router interface that's sending the flow packets. With rp_filter = 1, the kernel rejects packets that it thinks should not show up on that interface. I turned off rp_filter for that interface and everything is working again.
Thanks for your help and suggestions! -Ben _______________________________________________ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools
