Hi Peter, Peter Haag wrote:
> Matti Saarinen wrote: > >> I wonder what have I done wrong. I have set up two profiles. One that >> filters netflow data sent by a Juniper router works. The other one that >> filters netflow data sent by Cisco Catalyst 6500s does not. > > Obviously, there is something different. Have you checked the log > files? Any indication? Check with tcpdump, if the CISCO router really > sends the flows. The flows seem to appear normally. They are stored on the file system and nfdum can read them. Also, with the filter the non-working profile uses nfdump outputs correct data when it reads the nfcapd files containing flows sent by Cisco. echo ".#profile#2#channel#vallila1#012" | nfprofile -P /srv/data1/nfsen/profiles-stat -M /flow/live/vallila1 -r 2009/06/08/08/nfcapd.200906080835 -p /srv/data1/nfsen/profiles-data -S 2 -z -I Process line '.#dns-servers#2#anycast-dns#vallila1#012 ' Setup channel 'anycast-dns' in profile 'dns-servers' group '.', channellist 'vallila1' Filter: (ident vallila1) and (dst ip 128.214.20.30 ) -- - Matti - ------------------------------------------------------------------------------ OpenSolaris 2009.06 is a cutting edge operating system for enterprises looking to deploy the next generation of Solaris that includes the latest innovations from Sun and the OpenSource community. Download a copy and enjoy capabilities such as Networking, Storage and Virtualization. Go to: http://p.sf.net/sfu/opensolaris-get _______________________________________________ Nfsen-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
