Sorry, but i forgot to mention that the version of the Netflow packet is
IPFIX.
Regards,
Federico
-------- Forwarded Message --------
Subject: peer_ip_src 0.0.0.0 on IPv6 netflow
Date: Tue, 8 Nov 2022 08:16:35 -0300
From: Federico Urtizberea <furtizbe...@cetl.com.ar>
To: pmacct-discussion@pmacct.net
Hello everyone. Thank you for taking a moment and reading these lines.
I am trying to differentiate the ip of the exporter of the Netflow
packets, in this case the exporter is an MX104.
From what I understand, the field used by nfacct for this is
peer_ip_src. For IPv4 Netflows, peer_ip_src is completed correctly, but
for IPv6 for a few packets (i suspect the first ones), peer_ip_src is
the IPv6 address of the exporter, and for all other packets it is
completed with 0.0.0.0.
Launching nfacctd in debug mode you can see that the Netflow packets
arriving with the IPv6 of the exporter, and sniffing the incomming
interface for the nfacctd server searching for 0.0.0.0, nothing is found.
The nfacctd version that I'm using is nfacctd 1.7.7-git.
Thanks in advance,
Federico
_______________________________________________
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists