Re: [pmacct-discussion] Table for outbound traffic stays empty

2013-05-24 Thread Paolo Lucente
Hi Bjorn, Is it possible part of the traffic, the outbound one, is VLAN tagged? It's the only thing that comes to mind; if this is the case you can solve it by rewriting the current filter as: vlan and src net 95.211.55.128/26 Let me know. If it does not ring a bell and/or solve, can you

[pmacct-discussion] Tips on dealing with overflowing 32-bit fields?

2013-05-24 Thread Edward Henigin
Hi y'all, I'm hoping that someone has some experience that might help. I'm using nfacctd to collect flows from a Cisco RSP720. After banging my head against the keyboard for a few days, I realized I should have configured pmacct with --enable-64bit. After re-building with that, accuracy is

Re: [pmacct-discussion] Tips on dealing with overflowing 32-bit fields?

2013-05-24 Thread Edward Henigin
Hi Brent, From what I've read on the SUP720 and RSP720, they do not support netflow sampling for creation/update, they only support sampling on export. I think the way that works is they randomly skip exporting some of the records. So I don't think that would actually impact the overflow issue...