2012/10/26 Renato Westphal <[email protected]> > > Hi Paolo/List, > > I'm using pmacct 0.14.0 with Netflow v9 and it seems that the > "nfprobe_direction" configuration option is not working as expected. Here is > my config: > > ================ > daemonize: false > interface: eth1 > ! > aggregate[out]: src_mac, dst_mac, src_host, dst_host, src_port, dst_port, > proto, dst_as > aggregate_filter[out]: ether src 08:00:27:de:4f:c9 > aggregate[in]: src_mac, dst_mac, src_host, dst_host, src_port, dst_port, > proto, src_as > aggregate_filter[in]: ether src !(08:00:27:de:4f:c9) > ! > plugins: nfprobe[out],nfprobe[in] > ! > nfprobe_direction[in]:in > nfprobe_direction[out]:out > ! > nfprobe_receiver: x.x.x.x:9996 > nfprobe_version: 9 > ! > ================ > > The problem is that the "Direction" field from the exported flows is always > set to '0' (which represents an ingress flow), whereas I think they should be > set to '1' in the flows generated by nfprobe[out]. Is this a software bug or > is there a problem with my config? > > Any help would be appreciated, > Renato.
Well, there was a problem with my config file ^^ I was using a wrong mac address, so all traffic was being exported by nfprobe[in]. After fixing the mac address everything started working fine ;) -- Renato Westphal _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
