Hi Andrey you do not need to do "--interpret-flow-packets --debug” as this are only for debugging.
For NFlite you need to use the NFlite plugin (as NFLite flows are called NetFlow…. but the name is misleading), so something like nprobe -i none --nflite 2055 -b 2 Cheers Luca > On 11 Jan 2016, at 16:03, Andrzej Miesiak <andrzej.mies...@gmail.com> wrote: > > Hello, > > I try to use nprobe as Cisco Netflow-Lite aggregator with C4849E > switch; nprobe is receiving templates and packet samples, but no flows > are exported. Is there anyone using this feature? My switch config and > nprobe debug output: > > ! > netflow-lite exporter nprobe > transport udp 2055 > template data timeout 60 > options sampler-table timeout 60 > options interface-table timeout 60 > source <my switch ip> > destination <my nprobe host> > netflow-lite sampler sampl > packet-rate 32 > ! > interface GigabitEthernet1/1 > netflow-lite monitor 1 > sampler sampl > exporter nprobe > > > # nprobe --nflite 2055 -3 2055 -i none -n 127.0.0.1:9996 -V 10 > --interpret-flow-packets --debug -b 2 -t 15 > (...) > 11/Jan/2016 21:11:25 [nflitePlugin.c:900] [NFLite] Created UDP socket > [# sockets: 1] > 11/Jan/2016 21:11:25 [nflitePlugin.c:904] [NFLite] Listening on port > range 2055-2055 (1) > 11/Jan/2016 21:11:25 [nflitePlugin.c:914] [NFLite] Initialized > NetFlow-Lite plugin > (...) > 11/Jan/2016 21:12:08 [collect.c:1081] >>>>> Defined flow template > [id=304][flowLen=104][fieldCount=11] > 11/Jan/2016 21:12:08 [collect.c:1096] Moving 44 bytes forward: new > offset is 72 [stillToProcess=0] > 11/Jan/2016 21:12:11 [collect.c:1750] NETFLOW_DEBUG: Received 128 bytes flow > 11/Jan/2016 21:12:11 [collect.c:833] [displ=20][01 30 00] > 11/Jan/2016 21:12:11 [collect.c:1109] Found FlowSet [displ=20] > 11/Jan/2016 21:12:11 [collect.c:1154] >>>>> Rcvd flow with known > template 304 [24...108] > 11/Jan/2016 21:12:11 [collect.c:1208] >>>>> Dissecting flow field > [optionTemplate=0][displ=24/108][template=304][fieldId=312][fieldLen=2][isPenField=0][field=0/11] > [24...128] [accum_len=0] [00 D4 00 00] > 11/Jan/2016 21:12:11 [collect.c:1208] >>>>> Dissecting flow field > [optionTemplate=0][displ=26/108][template=304][fieldId=319][fieldLen=8][isPenField=0][field=1/11] > [26...128] [accum_len=2] [00 00 00 00] > 11/Jan/2016 21:12:11 [collect.c:1208] >>>>> Dissecting flow field > [optionTemplate=0][displ=34/108][template=304][fieldId=318][fieldLen=8][isPenField=0][field=2/11] > [34...128] [accum_len=10] [00 00 00 00] > 11/Jan/2016 21:12:11 [collect.c:1208] >>>>> Dissecting flow field > [optionTemplate=0][displ=42/108][template=304][fieldId=277][fieldLen=2][isPenField=0][field=3/11] > [42...128] [accum_len=18] [00 01 00 00] > 11/Jan/2016 21:12:11 [collect.c:1208] >>>>> Dissecting flow field > [optionTemplate=0][displ=44/108][template=304][fieldId=138][fieldLen=4][isPenField=0][field=4/11] > [44...128] [accum_len=20] [00 00 00 01] > 11/Jan/2016 21:12:11 [collect.c:1208] >>>>> Dissecting flow field > [optionTemplate=0][displ=48/108][template=304][fieldId=302][fieldLen=2][isPenField=0][field=5/11] > [48...128] [accum_len=24] [00 01 00 00] > 11/Jan/2016 21:12:11 [collect.c:1208] >>>>> Dissecting flow field > [optionTemplate=0][displ=50/108][template=304][fieldId=167][fieldLen=4][isPenField=0][field=6/11] > [50...128] [accum_len=26] [00 00 00 00] > 11/Jan/2016 21:12:11 [collect.c:1208] >>>>> Dissecting flow field > [optionTemplate=0][displ=54/108][template=304][fieldId=10][fieldLen=4][isPenField=0][field=7/11] > [54...128] [accum_len=30] [00 00 00 01] > 11/Jan/2016 21:12:11 [collect.c:1208] >>>>> Dissecting flow field > [optionTemplate=0][displ=58/108][template=304][fieldId=14][fieldLen=4][isPenField=0][field=8/11] > [58...128] [accum_len=34] [00 00 00 00] > 11/Jan/2016 21:12:11 [collect.c:1208] >>>>> Dissecting flow field > [optionTemplate=0][displ=62/108][template=304][fieldId=103][fieldLen=2][isPenField=0][field=9/11] > [62...128] [accum_len=38] [00 40 33 33] > 11/Jan/2016 21:12:11 [collect.c:1208] >>>>> Dissecting flow field > [optionTemplate=0][displ=64/108][template=304][fieldId=104][fieldLen=64][isPenField=0][field=10/11] > [64...128] [accum_len=40] [33 33 00 00] > 11/Jan/2016 21:12:14 [collect.c:1750] NETFLOW_DEBUG: Received 72 bytes flow > ^C > 11/Jan/2016 21:13:32 [cache.c:1210] Redis Cache [0 total/0.0 > get/sec][0 total/0.0 set/sec] > 11/Jan/2016 21:13:32 [nprobe.c:394] Received shutdown request... [signal: 2] > (...) > 11/Jan/2016 21:13:35 [plugin.c:285] Terminating Netflow-Lite Plugin > (...) > 11/Jan/2016 21:13:35 [nprobe.c:2505] Processed packets: 33 (max bucket > search: 0) > 11/Jan/2016 21:13:35 [nprobe.c:2488] Fragment queue length: 0 > 11/Jan/2016 21:13:35 [nprobe.c:2514] Flow export stats: [0 bytes/0 > pkts][0 flows/0 pkts sent] > 11/Jan/2016 21:13:35 [nprobe.c:2521] Flow collection: [collected pkts: > 148][processed flows: 0] > 11/Jan/2016 21:13:35 [nprobe.c:2524] Flow drop stats: [0 bytes/0 > pkts][0 flows] > 11/Jan/2016 21:13:35 [nprobe.c:2529] Total flow stats: [0 bytes/0 > pkts][0 flows/0 pkts sent] > 11/Jan/2016 21:13:35 [nprobe.c:5078] Cleaning globals > 11/Jan/2016 21:13:35 [nprobe.c:5098] nProbe terminated. > > > regards > > Andrzej > _______________________________________________ > Ntop-misc mailing list > Ntop-misc@listgateway.unipi.it > http://listgateway.unipi.it/mailman/listinfo/ntop-misc _______________________________________________ Ntop-misc mailing list Ntop-misc@listgateway.unipi.it http://listgateway.unipi.it/mailman/listinfo/ntop-misc
