Sorry, but i forgot to mention that the version of the Netflow packet is IPFIX.
Regards,

Federico



-------- Forwarded Message --------
Subject:        peer_ip_src 0.0.0.0 on IPv6 netflow
Date:   Tue, 8 Nov 2022 08:16:35 -0300
From:   Federico Urtizberea <furtizbe...@cetl.com.ar>
To:     pmacct-discussion@pmacct.net



Hello everyone. Thank you for taking a moment and reading these lines.
I am trying to differentiate the ip of the exporter of the Netflow packets, in this case the exporter is an MX104. From what I understand, the field used by nfacct for this is peer_ip_src. For IPv4 Netflows, peer_ip_src is completed correctly, but for IPv6 for a few packets (i suspect the first ones), peer_ip_src is the IPv6 address of the exporter, and for all other packets it is completed with 0.0.0.0. Launching nfacctd in debug mode you can see that the Netflow packets arriving with the IPv6 of the exporter, and sniffing the incomming interface for the nfacctd server searching for 0.0.0.0, nothing is found.
The nfacctd version that I'm using is nfacctd 1.7.7-git.
Thanks in advance,

Federico
_______________________________________________
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists

Reply via email to