Dear misc@,
I am using the 4.4-current CVS from 2008-09-17, and having problem with
exporting NetFlow data with the new pflow pseudo-device. The setup used to work
just fine using softflowd. There is nfcapd at the receiving end, but this
probably is irrelevant.
$ netstat -s -f pflow
pflow:
25053 flows sent
835 packets sent
0 send failed due to mbuf memory error
834 send error
It seems that only the first send succeeds as I can see data around the time I
booted to the latest compile of kernel & userland. With pfctl I can see the
states correctly marked as (pflow, no-sync), using the set state-default pflow,
no-sync. But for some reason the sending fails (after 1 successful send?).
tcpdump reveals no packets actually being sent out. PF is set to pass all.
$ ifconfig pflow0
pflow0: flags=41 mtu 1464
pflow: sender: 10.0.16.1 receiver: 10.0.16.20:9996
groups: pflow
10.0.16.1 is on a vlan interface if that makes any difference.
Any ideas? What could I do to dig deeper into the problem or help track down
possible bug? Is it still so much "work in progress" problems are expected?
Regards,
V
(apologies for the hotmail address!)
_________________________________________________________________
Discover the new Windows Vista
http://search.msn.com/results.aspx?q=windows+vista&mkt=en-US&form=QBRE
