Sorry, that's the -i flag (@[EMAIL PROTECTED] Microsoft Outlook!) -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Moore - GMD Sent: Thursday, December 02, 2004 6:54 PM To: '[EMAIL PROTECTED]' Subject: RE: [Ntop] Foundry sFlow -> ntop 3.0 problems
Next troubleshooting step: since you're capturing traffic on the Ethernet interface then just look at the Ntop report and look for the sFlow packets to make sure Ntop is actually getting them. Make sure they're on the right port, etc. Keeping it going: add your sFlow interface to your -I flag in your config file/command line. Chris -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Robert Brewer Sent: Thursday, December 02, 2004 5:24 PM To: [EMAIL PROTECTED] Subject: [Ntop] Foundry sFlow -> ntop 3.0 problems I'm trying to get a Foundry FastIron Edge Switch 4802 to send sFlow data to ntop 3.0 running on FreeBSD 4.10. The FES 4802 is running version 03.1.02Tc3, ntop was built from ports on FreeBSD. After some confusion getting the sFlow plugin working in ntop (I got it into a state where the sFlow plugin was enabled, but no sFlow interface would show up in the Switch NIC section), I think the FES is sending sFlow data to ntop: [EMAIL PROTECTED](config)#show sflow sFlow services are enabled. sFlow agent IP address: 64.65.64.153 Collector IP 64.65.64.59, UDP 6343 Polling interval is 20 seconds. Configured default sampling rate: 1 per 1024 packets. Actual default sampling rate: 1 per 1024 packets. 83 UDP packets exported 66 sFlow samples collected. sFlow ports: ethe 1 Port Sampling Rates ------------------- Port=1, configured rate=1024, actual rate=1024 However ntop doesn't seem to be getting any data after I Switch NIC to the sflow virtual device, all pages are either blank or say there is no data. Then I turned on sFlow debugging, and the log fills with this message repeated over and over: Wed Dec 1 16:38:20 2004 SFLOW_DEBUG: rawSampleLen: rc=-1 Any suggestions on how to get this going? The FES isn't seeing any traffic worth mentioning, so I don't think it is a load issue. I also am confused by the sFlow plugin setup. If I switch sFlow off, shutdown ntop, restart ntop and re-enable sFlow then I can see the sFlow interface in Switch NIC. However if I shut down ntop and restart it, the sFlow plugin shows enabled, but Switch NIC reports that I am only capturing traffic from the server's ethernet interface de0. How do I keep sFlow going between ntop restarts? Mahalo! -- Robert Brewer Assistant Manager, System Department LavaNet, Inc. [EMAIL PROTECTED] -- Robert Brewer ph: 808-532-8246 Assistant Manager, System Department fax: 808-532-8246 LavaNet, Inc. [EMAIL PROTECTED] _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop ********************************************************************** Confidential/Proprietary Note The information in this email is confidential and may be legally privileged. Access to this email by anyone other than the intended addressee is unauthorized. If you are not the intended recipient of this message, any review, disclosure, copying, distribution, retention, or any action taken or omitted to be taken in reliance on it is prohibited and may be unlawful. If you are not the intended recipient, please reply to or forward a copy of this message to the sender and delete the message, any attachments, and any copies thereof from your system. Thank you. Guardian Mortgage Documents, Inc. 225 Union Boulevard, Suite 200 Lakewood, CO 80228. ********************************************************************** _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
