I'm trying to get a Foundry FastIron Edge Switch 4802 to send sFlow data to ntop 3.0 running on FreeBSD 4.10. The FES 4802 is running version 03.1.02Tc3, ntop was built from ports on FreeBSD.

After some confusion getting the sFlow plugin working in ntop (I got it into a state where the sFlow plugin was enabled, but no sFlow interface would show up in the Switch NIC section), I think the FES is sending sFlow data to ntop:

[EMAIL PROTECTED](config)#show sflow
sFlow services are enabled.
sFlow agent IP address: 64.65.64.153
Collector IP 64.65.64.59, UDP 6343
Polling interval is 20 seconds.
Configured default sampling rate: 1 per 1024 packets.
Actual default sampling rate: 1 per 1024 packets.
83 UDP packets exported
66 sFlow samples collected.
sFlow ports: ethe 1
Port Sampling Rates
-------------------
Port=1, configured rate=1024, actual rate=1024

However ntop doesn't seem to be getting any data after I Switch NIC to the sflow virtual device, all pages are either blank or say there is no data. Then I turned on sFlow debugging, and the log fills with this message repeated over and over:

Wed Dec  1 16:38:20 2004  SFLOW_DEBUG: rawSampleLen: rc=-1

Any suggestions on how to get this going? The FES isn't seeing any traffic worth mentioning, so I don't think it is a load issue.

I also am confused by the sFlow plugin setup. If I switch sFlow off, shutdown ntop, restart ntop and re-enable sFlow then I can see the sFlow interface in Switch NIC. However if I shut down ntop and restart it, the sFlow plugin shows enabled, but Switch NIC reports that I am only capturing traffic from the server's ethernet interface de0. How do I keep sFlow going between ntop restarts?

Mahalo!
--
Robert Brewer
Assistant Manager, System Department
LavaNet, Inc.                                              [EMAIL PROTECTED]

--
Robert Brewer                                              ph: 808-532-8246
Assistant Manager, System Department                      fax: 808-532-8246
LavaNet, Inc.                                              [EMAIL PROTECTED]
_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to