Re: [pmacct-discussion] Only packets from router to netflow server

2016-08-19 Thread Paolo Lucente
Hi Mattias, From what i read so far I believe the pesky bit here is that you are using pmacctd (which is the libpcap-based daemon) rather than nfacctd (which is the NetFlow collector daemon, which collects and analyses/dissects NetFlow packets). Cheers, Paolo On Fri, Aug 19, 2016 at

Re: [pmacct-discussion] Only packets from router to netflow server

2016-08-19 Thread Mattias Larsson
Hi Markus, Not sure what you mean with that the server does NOT accept/process the packets due to it target to another MAC address. I thought the pmacctd used the libpcap the same way that tcpdump does and analyses packets. But with tcpdump I have to use -vvv the all of the packet. This is what

Re: [pmacct-discussion] Only packets from router to netflow server

2016-08-19 Thread Markus Weber
Hi Matthias, could it be that your hosts does NOT accept/process the packets as those are targeted to another MAC address? If you run wireshark/tcpdump the interface to put into promiscuous mode to get them ... If all have the same dst mac just change your interface facing the SPAN port to

Re: [pmacct-discussion] Only packets from router to netflow server

2016-08-19 Thread Jentsch, Mario
Hi Mattias, do you have a drawing of your setup? I have to admit that it is unclear to me… Thanks, Mario From: pmacct-discussion [mailto:pmacct-discussion-boun...@pmacct.net] On Behalf Of Mattias Larsson Sent: Thursday, August 18, 2016 1:36 PM To: pmacct-discussion@pmacct.net Subject:

Re: [pmacct-discussion] collecting large number of netflows

2016-08-19 Thread Jentsch, Mario
Sounds like you have already have the DB server hardware. It may be a good idea to simulate the data flows to and from your DB. Some scripts that insert data at different constant rates and/or intermittent as it comes from nfacctd normally generate the input to the DB. At the same time you