Hi Cedric,
Could you send me by unicast email a brief sample, in pcap format, of the v4 / v6 packets that pmacctd is seeing? It will allow me to replay them at my end and see what the problem may be. Also, can you confirm by doing a 'pmacctd -V' which version of pmacct are you running? Finally, slightly unrelated but i tend to ask this always: why two BGP sessions, one per address-family, between pmacct and the BGP daemon? Can you not travel both v4 and v6 as part of the same session so that you can save yourself the filtering / mapping trickery? Paolo On Mon, Aug 13, 2018 at 12:32:28PM +0200, BASSAGET Cédric wrote: > Hello, > I'm working for days on pmacct, trying to make him send ipv6 sflow packets > to my collector. But I only see ipv4. > > Here's my config : > > root@bgp-rtr2:/usr/local/etc/pmacct# cat pmacctd.sflow.conf > > debug: false > daemonize: false > interface: eth0 > aggregate: etype, tag, src_host, dst_host, src_port, dst_port, proto, tos, > src_as, dst_as > > ! plugins: sfprobe[ipv4],sfprobe[ipv6] > plugins: sfprobe[ipv4] > > sfprobe_receiver[ipv4]: 192.168.156.109:6343 > sfprobe_direction[ipv4]: tag > sfprobe_ifindex[ipv4]: tag2 > sfprobe_agentip[ipv4]: 185.x.x.1 > > ! sfprobe_receiver[ipv6]: 192.168.156.109:6343 > ! sfprobe_direction[ipv6]: tag > ! sfprobe_ifindex[ipv6]: tag2 > ! sfprobe_agentip[ipv6]: 212.x.x.171 > > plugin_buffer_size: 40960 > > sampling_rate: 100 > pmacctd_as: bgp > bgp_daemon: true > ! bgp_daemon_ip: 127.0.0.1 > bgp_daemon_ip: :: > bgp_daemon_port: 17917 > bgp_agent_map: /usr/local/etc/pmacct/bgp_agent_map.map > bgp_peer_as_skip_subas: true > bgp_peer_src_as_type: bgp > pre_tag_map: /usr/local/etc/pmacct/pretag.map > > root@bgp-rtr2:/usr/local/etc/pmacct# cat bgp_agent_map.map > bgp_ip=185.x.x.1 ip=0.0.0.0/0 filter='ip or (vlan and ip)' > bgp_ip=212.x.x.171 ip=0.0.0.0/0 filter='ip6 or (vlan and ip6)' > > BGP sessions are UP with bird and bird6 processes. but only ipv4 flow is > exported. > What am I doing wrong ? > > I tried (the commented part) to add an ipv6 sfprobe plugin, but the result > is that all flows are sent twice to the receiver. > > Thanks for your help. > Regards > _______________________________________________ > pmacct-discussion mailing list > http://www.pmacct.net/#mailinglists _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
