On 18.06.2009 18:05, fedora fedora wrote:

> No, nfcapd is the only process listening on that port, see the output below.
[...]
>     The server i am using is running 64bit ubuntu 8.10
>     server edition, and
>     netflow traffic is being sent over on port 10001.
[...]
>     btw, I am sure the netflow traffic is being sent to this
>     port, i run a
>     tcpdump on port 10001 and the catpured file was
>     succefully recognized by
>     wireshark as netflow v5 data.
> 
>     What might be wrong? why nfsen sees no netflow traffic
>     at all?

You also said that it's working correctly on a 32 bit platform? Then perhaps
something is wrong with the nfcapd binary or any of the libraries on the 64 bit 
system?

For checking this, try 'ldd /path/to/nfcapd'.

Another idea might be to use 'strace' to see what nfcapd is actually doing.

HTH -- Till
-- 
Dipl.-Inform. Till Dörges                  [email protected]

PRESENSE Technologies GmbH            Sachsenstr. 5, D-20097 HH
Geschäftsführer/Managing Directors       AG Hamburg, HRB 107844
Till Dörges           Jürgen Sander              Axel Theilmann


------------------------------------------------------------------------------
_______________________________________________
Nfdump-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfdump-discuss

Reply via email to