[EMAIL PROTECTED] wrote: > > If I do a packet capture I see tons of flows in the netflow packets. All > the flow files on the disk are the same size - 276 bytes, and nfdump shows > no flows captured. > > Anybody knows why this might be happening? >
If your router is configured properly to send to the capture server on that port, then my first guess would be some sort of firewall blocking the traffic (possibly iptables or equiv on the capture server?). Use tcpdump to watch for the traffic to see if it is at least making it to your server. If not, check for a firewall in the middle. If not that, then you may have a configuration problem on your router for the flow export. Regards, Mark -- Mark D. Nagel, CCIE #3177 <[EMAIL PROTECTED]> Principal Consultant, Willing Minds LLC (http://www.willingminds.com) cell: 949-279-5817, desk: 714-630-4772, fax: 949-623-9854 *** Please send support requests to [EMAIL PROTECTED] *** ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2005. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ Nfdump-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
