> The problem I have now is the mac_src, mac_dst, src_port and dst_port > fields are always 0 (protocol is ip).
I don't mind to much about the MAC addresses (also all zero for me), but I've also noted that with Netflow (Cisco Netflow and DD-WRT rFlow) I never get TCP/UDP/ICMP entries in the IP PROTO field - all entries ends up as "IP" in MySQL. Is this field supposed to end up like that on all Netflow versions? If not I will do some debugging - right now I leave it off the priority list. Ports, however, work very nicely on my setup. best, -- Inge
<<winmail.dat>>
