Hello, Try to capture flow traffic from your routers and save it as a file (-s 1600 -w /tmp/capture.cap). Open the file in Wireshark, decode is as 'cflow' and look in the individual flows to see under which version they are exported. Nfsen only supports v5,7 and 9.
Good luck On Tue, Jun 23, 2009 at 11:09 PM, Nitesh Pant <[email protected]> wrote: > > Hi > > I updated nfsen-1.3.2. After around 3 hours out of four routers, I am able > to collect flows from just two routers. > > Out of four routers two of the routers are in the same network address to > that of netflow server, and other two are in the public domains. > > I used tcpdump to check the flow-connection and I can find out that I am > getting the flows from all routers, but the collector is collecting the > flows from just two routers (which are in the same network). > > I checked out the log message, there I get following warning message > > printk: 150 messages suppressed. > Jun 23 14:28:11 netflow kernel: martian source 'server-ip' from 'router3' > on dev eth1 > Jun 23 14:28:11 netflow kernel: ll header: > 00:21:6e:48:f4:46:00:1a:30:7e:1a:40:08:00 > > > TCPDUMP OUTPUT > > 14:55:24.414307 IP 'router3'.49587 > netflow.palace-2: UDP, length 1416 > 14:55:24.414411 IP 'router3'.49587 > netflow.palace-2: UDP, length 1416 > 14:55:24.414509 IP 'router3'.49587 > netflow.palace-2: UDP, length 1416 > 14:55:24.414793 IP 'router3'.49587 > netflow.palace-2: UDP, length 1416 > > > I tried to google it, but couldnot find specific answer. Can anyone give me > any idea on this, how to solve this problem? > > > PS: palace-2 is the port num 9993 > > > > Regards > Nitesh Pant > > > > ------------------------------------------------------------------------------ > > _______________________________________________ > Nfsen-discuss mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/nfsen-discuss > >
------------------------------------------------------------------------------
_______________________________________________ Nfsen-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
