I am exporting Netflow from 2 Mikrotik CCR (v9 but I also tried version 5) and
trying to capture them with nfacctd.
My config for testing:
The data nfacctd provided looked wrong and therefore i captured the exact same
netflows (on 2 different ports) with nfacctd and nfcapd which shows these
nfacctd (nfacctd 1.6.2-git) for test address: "packets": 698015, "bytes":
nfcapd (Version: 1.6.12) for test address: packets: 879505 bytes: 704001361
nfcapd commandline: nfcapd -p 2055 -l /tmp -t 300
I am not sure why there is such a big difference, maybe someone can point me
the right direction?
pmacct-discussion mailing list