Read the back traffic on this list - IIRC there are two types of sFlow messages, a sort of summary (which ntop ignores) and the details. Somebody else went through this and posted back his experiences.
-----Burton -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Robert Brewer Sent: Thursday, December 02, 2004 6:24 PM To: [EMAIL PROTECTED] Subject: [Ntop] Foundry sFlow -> ntop 3.0 problems I'm trying to get a Foundry FastIron Edge Switch 4802 to send sFlow data to ntop 3.0 running on FreeBSD 4.10. The FES 4802 is running version 03.1.02Tc3, ntop was built from ports on FreeBSD. After some confusion getting the sFlow plugin working in ntop (I got it into a state where the sFlow plugin was enabled, but no sFlow interface would show up in the Switch NIC section), I think the FES is sending sFlow data to ntop: [EMAIL PROTECTED](config)#show sflow sFlow services are enabled. sFlow agent IP address: 64.65.64.153 Collector IP 64.65.64.59, UDP 6343 Polling interval is 20 seconds. Configured default sampling rate: 1 per 1024 packets. Actual default sampling rate: 1 per 1024 packets. 83 UDP packets exported 66 sFlow samples collected. sFlow ports: ethe 1 Port Sampling Rates ------------------- Port=1, configured rate=1024, actual rate=1024 However ntop doesn't seem to be getting any data after I Switch NIC to the sflow virtual device, all pages are either blank or say there is no data. Then I turned on sFlow debugging, and the log fills with this message repeated over and over: Wed Dec 1 16:38:20 2004 SFLOW_DEBUG: rawSampleLen: rc=-1 Any suggestions on how to get this going? The FES isn't seeing any traffic worth mentioning, so I don't think it is a load issue. I also am confused by the sFlow plugin setup. If I switch sFlow off, shutdown ntop, restart ntop and re-enable sFlow then I can see the sFlow interface in Switch NIC. However if I shut down ntop and restart it, the sFlow plugin shows enabled, but Switch NIC reports that I am only capturing traffic from the server's ethernet interface de0. How do I keep sFlow going between ntop restarts? Mahalo! -- Robert Brewer Assistant Manager, System Department LavaNet, Inc. [EMAIL PROTECTED] -- Robert Brewer ph: 808-532-8246 Assistant Manager, System Department fax: 808-532-8246 LavaNet, Inc. [EMAIL PROTECTED] _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
