Re: [SUSPECTED SPAM] [vpp-dev] IPFIX Nat Logging
I'm using VPP 18.10, ipfix logging is working with such config: set ipfix exporter collector 10.10.10.2 src 10.10.10.1 flowprobe params record l3 active 20 passive 120 flowprobe feature add-del GigabitEthernet0/4/0 ip6 I didn't tested ipfix with nat44. -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#11933): https://lists.fd.io/g/vpp-dev/message/11933 Mute This Topic: https://lists.fd.io/mt/28911869/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [SUSPECTED SPAM] [vpp-dev] IPFIX Nat Logging
Dear Ole, No I don't see any things on the wire. Ipfix logging doesn't work in flowprobe and nat mode for me . my vpp version is stable18.10 Warm Regards, -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#11910): https://lists.fd.io/g/vpp-dev/message/11910 Mute This Topic: https://lists.fd.io/mt/28911869/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [SUSPECTED SPAM] [vpp-dev] IPFIX Nat Logging
Not at my computer right now, but since flow packets are locally generated there might not be trace information for them. Looks like 13 ipfix packets were sent though. You didn’t see those on the wire? Cheers Ole > On 14 Jan 2019, at 08:14, emma sdi wrote: > > Dear Ole, > > I checked ipfix by flowprobe and I have the same problem again. I don't see > any ipfix packets log in "vppctl sh trace". > > vppctl sh error >CountNode Reason > 14802null-node blackholed packets > 13 flowprobe-l2 Exported packets > 5 acl-plugin-out-ip4-fa new sessions added >462 acl-plugin-out-ip4-fa existing session packets >467 acl-plugin-out-ip4-fa checked packets > 6 acl-plugin-in-ip4-fa new sessions added >463 acl-plugin-in-ip4-fa existing session packets >469 acl-plugin-in-ip4-fa checked packets > 14arp-input ARP replies sent > 2arp-input ARP request IP4 source > address learned > 4ip4-input ip4 source lookup miss > 75866ip4-input Multicast RPF check failed > 2ip4-glean ARP requests sent > 84 ethernet-input no error > > Best Regards, > -=-=-=-=-=-=-=-=-=-=-=- > Links: You receive all messages sent to this group. > > View/Reply Online (#11906): https://lists.fd.io/g/vpp-dev/message/11906 > Mute This Topic: https://lists.fd.io/mt/28911869/675193 > Group Owner: vpp-dev+ow...@lists.fd.io > Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [otr...@employees.org] > -=-=-=-=-=-=-=-=-=-=-=- -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#11908): https://lists.fd.io/g/vpp-dev/message/11908 Mute This Topic: https://lists.fd.io/mt/28911869/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [SUSPECTED SPAM] [vpp-dev] IPFIX Nat Logging
Dear Ole, I checked ipfix by flowprobe and I have the same problem again. I don't see any ipfix packets log in "vppctl sh trace". vppctl sh error Count Node Reason 14802 null-node blackholed packets 13 flowprobe-l2 Exported packets 5 acl-plugin-out-ip4-fa new sessions added 462 acl-plugin-out-ip4-fa existing session packets 467 acl-plugin-out-ip4-fa checked packets 6 acl-plugin-in-ip4-fa new sessions added 463 acl-plugin-in-ip4-fa existing session packets 469 acl-plugin-in-ip4-fa checked packets 14 arp-input ARP replies sent 2 arp-input ARP request IP4 source address learned 4 ip4-input ip4 source lookup miss 75866 ip4-input Multicast RPF check failed 2 ip4-glean ARP requests sent 84 ethernet-input no error Best Regards, -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#11906): https://lists.fd.io/g/vpp-dev/message/11906 Mute This Topic: https://lists.fd.io/mt/28911869/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [SUSPECTED SPAM] [vpp-dev] IPFIX Nat Logging
Hi, so you have checked: - trace (show trace) after enabling trace on the input node - show errors - interface counters Apart from firing up the debugger I’m running out of suggestions. Can you get plain (non-NAT) IPfix to work? Cheers, Ole > On 9 Jan 2019, at 14:04, emma sdi wrote: > > Dear Fabian, > > I checked the output of "sh int" command and ipfix flush command didn't't > change tx packets counters. it seems this command don't work! > Anyway thanks for taking time and your consideration and help. > > Best Regards, > > On Wed, Jan 9, 2019 at 3:45 PM Matus Fabian -X (matfabia - PANTHEON > TECHNOLOGIES at Cisco) wrote: > Hi, > > > > VPP configuration look good to me, I am not sure what is wrong. Maybe try to > check “show interface” output, IPfix should add 9 additional tx packets for > GigabitEthernet3/0/0 after ping and “ipfix flush” command. > > > > Matus > > > > > > From: vpp-dev@lists.fd.io On Behalf Of emma sdi > Sent: Wednesday, January 9, 2019 12:32 PM > To: vpp-dev@lists.fd.io > Subject: Re: [SUSPECTED SPAM] [vpp-dev] IPFIX Nat Logging > > > > Dear Fabian, > > Unfortunately, the collector counter is still stuck to zero (no ipfix packets > received). > I would like to check my topology and configuration with you. thanks in > advance. > > Client1 IP: 2.2.2.2 > Client2 IP: 3.3.3.3 > > DUT config: > GigabitEthernet3/0/0 (up): > L3 2.2.2.1/24 > GigabitEthernetb/0/0 (up): > L3 3.3.3.1/24 > > vppctl set interface nat44 in GigabitEthernet3/0/0 out GigabitEthernetb/0/0 > vppctl nat44 add address 40.40.40.40 - 40.40.40.254 > vppctl set ipfix exporter collector 2.2.2.2 port 4739 src 2.2.2.1 > vppctl nat ipfix logging > > Client1: nfcapd -l /root/log/ -E -p 4739 > > client1 ping client2 successfully. the src addr of echo packets in DUT is > changed to 40.40.4 0.254 and also in return path, the destination of reply > packets is changed to original address again. I mean we have the correct nat > functionality. but about ipfix, the collector doesn't receive any log. I > checked it by tcpdump and nfcapd. > > Best Regards, > > -=-=-=-=-=-=-=-=-=-=-=- > Links: You receive all messages sent to this group. > > View/Reply Online (#11888): https://lists.fd.io/g/vpp-dev/message/11888 > Mute This Topic: https://lists.fd.io/mt/28911869/675193 > Group Owner: vpp-dev+ow...@lists.fd.io > Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [otr...@employees.org] > -=-=-=-=-=-=-=-=-=-=-=- -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#11889): https://lists.fd.io/g/vpp-dev/message/11889 Mute This Topic: https://lists.fd.io/mt/28911869/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [SUSPECTED SPAM] [vpp-dev] IPFIX Nat Logging
Dear Fabian, I checked the output of "sh int" command and ipfix flush command didn't't change tx packets counters. it seems this command don't work! Anyway thanks for taking time and your consideration and help. Best Regards, On Wed, Jan 9, 2019 at 3:45 PM Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) wrote: > Hi, > > > > VPP configuration look good to me, I am not sure what is wrong. Maybe try > to check “show interface” output, IPfix should add 9 additional tx packets > for GigabitEthernet3/0/0 after ping and “ipfix flush” command. > > > > Matus > > > > > > *From:* vpp-dev@lists.fd.io *On Behalf Of *emma sdi > *Sent:* Wednesday, January 9, 2019 12:32 PM > *To:* vpp-dev@lists.fd.io > *Subject:* Re: [SUSPECTED SPAM] [vpp-dev] IPFIX Nat Logging > > > > Dear Fabian, > > Unfortunately, the collector counter is still stuck to zero (no ipfix > packets received). > I would like to check my topology and configuration with you. thanks in > advance. > > Client1 IP: 2.2.2.2 > Client2 IP: 3.3.3.3 > > DUT config: > GigabitEthernet3/0/0 (up): > L3 2.2.2.1/24 > GigabitEthernetb/0/0 (up): > L3 3.3.3.1/24 > > vppctl set interface nat44 in GigabitEthernet3/0/0 out GigabitEthernetb/0/0 > vppctl nat44 add address 40.40.40.40 - 40.40.40.254 > vppctl set ipfix exporter collector 2.2.2.2 port 4739 src 2.2.2.1 > vppctl nat ipfix logging > > Client1: nfcapd -l /root/log/ -E -p 4739 > > client1 ping client2 successfully. the src addr of echo packets in DUT is > changed to 40.40.4 0.254 and also in return path, the destination of reply > packets is changed to original address again. I mean we have the correct > nat functionality. but about ipfix, the collector doesn't receive any log. > I checked it by tcpdump and nfcapd. > > Best Regards, > -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#11888): https://lists.fd.io/g/vpp-dev/message/11888 Mute This Topic: https://lists.fd.io/mt/28911869/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [SUSPECTED SPAM] [vpp-dev] IPFIX Nat Logging
Hi, VPP configuration look good to me, I am not sure what is wrong. Maybe try to check “show interface” output, IPfix should add 9 additional tx packets for GigabitEthernet3/0/0 after ping and “ipfix flush” command. Matus From: vpp-dev@lists.fd.io On Behalf Of emma sdi Sent: Wednesday, January 9, 2019 12:32 PM To: vpp-dev@lists.fd.io Subject: Re: [SUSPECTED SPAM] [vpp-dev] IPFIX Nat Logging Dear Fabian, Unfortunately, the collector counter is still stuck to zero (no ipfix packets received). I would like to check my topology and configuration with you. thanks in advance. Client1 IP: 2.2.2.2 Client2 IP: 3.3.3.3 DUT config: GigabitEthernet3/0/0 (up): L3 2.2.2.1/24 GigabitEthernetb/0/0 (up): L3 3.3.3.1/24 vppctl set interface nat44 in GigabitEthernet3/0/0 out GigabitEthernetb/0/0 vppctl nat44 add address 40.40.40.40 - 40.40.40.254 vppctl set ipfix exporter collector 2.2.2.2 port 4739 src 2.2.2.1 vppctl nat ipfix logging Client1: nfcapd -l /root/log/ -E -p 4739 client1 ping client2 successfully. the src addr of echo packets in DUT is changed to 40.40.4 0.254 and also in return path, the destination of reply packets is changed to original address again. I mean we have the correct nat functionality. but about ipfix, the collector doesn't receive any log. I checked it by tcpdump and nfcapd. Best Regards, -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#11884): https://lists.fd.io/g/vpp-dev/message/11884 Mute This Topic: https://lists.fd.io/mt/28911869/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [SUSPECTED SPAM] [vpp-dev] IPFIX Nat Logging
Dear Fabian, Unfortunately, the collector counter is still stuck to zero (no ipfix packets received). I would like to check my topology and configuration with you. thanks in advance. Client1 IP: 2.2.2.2 Client2 IP: 3.3.3.3 DUT config: GigabitEthernet3/0/0 (up): L3 2.2.2.1/24 GigabitEthernetb/0/0 (up): L3 3.3.3.1/24 vppctl set interface nat44 in GigabitEthernet3/0/0 out GigabitEthernetb/0/0 vppctl nat44 add address 40.40.40.40 - 40.40.40.254 vppctl set ipfix exporter collector 2.2.2.2 port 4739 src 2.2.2.1 vppctl nat ipfix logging Client1: nfcapd -l /root/log/ -E -p 4739 client1 ping client2 successfully. the src addr of echo packets in DUT is changed to 40.40.4 0.254 and also in return path, the destination of reply packets is changed to original address again. I mean we have the correct nat functionality. but about ipfix, the collector doesn't receive any log. I checked it by tcpdump and nfcapd. Best Regards, -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#11883): https://lists.fd.io/g/vpp-dev/message/11883 Mute This Topic: https://lists.fd.io/mt/28911869/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [SUSPECTED SPAM] [vpp-dev] IPFIX Nat Logging
https://wiki.fd.io/view/VPP/NAT#Enable_NAT_plugin_IPFIX_logging_example You can also take a look at NAT plugin test https://gerrit.fd.io/r/gitweb?p=vpp.git;a=blob;f=test/test_nat.py;h=c64359a4db743ebf187c4198a12b2e3c80f5433d;hb=HEAD#l2646 Matus From: khers Sent: Wednesday, January 9, 2019 9:48 AM To: Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) Subject: Re: [SUSPECTED SPAM] [vpp-dev] IPFIX Nat Logging Dear Fabian, No. my collector don't receive any thing. I would appreciate if you could give me a valid config for ipfix logging. Warm Regards, On Mon, Jan 7, 2019 at 9:16 AM Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) mailto:matfa...@cisco.com>> wrote: Hi, Do you receive at least IPfix templates on collector? Matus From: khers mailto:s3m2e1.6s...@gmail.com>> Sent: Sunday, January 6, 2019 8:58 AM To: Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) mailto:matfa...@cisco.com>> Cc: vpp-dev mailto:vpp-dev@lists.fd.io>> Subject: Re: [SUSPECTED SPAM] [vpp-dev] IPFIX Nat Logging Hi, I tried that but I didn't get any log from IPFIX Thanks Regards On Wed, Jan 2, 2019 at 9:31 AM Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) mailto:matfa...@cisco.com>> wrote: Hi, IPfix events are aggregated, to send it immediately use “ipfix flush" Matus From: vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> mailto:vpp-dev@lists.fd.io>> On Behalf Of emma sdi Sent: Tuesday, December 25, 2018 1:49 PM To: vpp-dev mailto:vpp-dev@lists.fd.io>> Subject: [SUSPECTED SPAM] [vpp-dev] IPFIX Nat Logging Dear Vpp, I'd just configured a simple snat to check logging nat with IPFIX.I have a router which vpp installed and two debian machines which one of them is IPFIX collector. Here it is the topology: https://paste.ubuntu.com/p/Hb9vpPhq67/ The IPFIX collector software is nfcapd. I defined a ip pool with range 40.40.40.40-40.40.40.254: nat44 add address 40.40.40.40 - 40.40.40.254 The interface of vpp side has ip 10.10.10.208 and the interface of collector side has ip 10.10.10.205 I defined ipfix collector with this command: set ipfix exporter collector 10.10.10.205 src 10.10.10.208 I enabled nat ipfix logging with this command: nat ipfix logging The ipfix collector software in client1 is ran with this command: nfcapd -l /root/log/ -E I send ping from client1 to client2 . The ping has echo and reply and the natting process is done as I send the output of vpp trace here: https://paste.ubuntu.com/p/HkMqSXy5tN/ But there aren't any IPFIX log on the output of nfcapd. Could you please tell me what should I do for collecting nat logs with IPFIX. Thanks Regards -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#11879): https://lists.fd.io/g/vpp-dev/message/11879 Mute This Topic: https://lists.fd.io/mt/28911869/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [SUSPECTED SPAM] [vpp-dev] IPFIX Nat Logging
[Edited Message Follows] Dear Fabian, No. my collector doesn't receive any thing. I would appreciate if you could give me a valid config for ipfix logging. Warm Regards On Mon, Jan 7, 2019 at 9:16 AM Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) < matfa...@cisco.com > wrote: > > > > Hi, > > > > > > > > Do you receive at least IPfix templates on collector? > > > > > > > > Matus > > > > > > > > > > > > *From:* khers < s3m2e1.6s...@gmail.com > > *Sent:* Sunday, January 6, 2019 8:58 AM > *To:* Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) < > matfa...@cisco.com > > > *Cc:* vpp-dev < vpp-dev@lists.fd.io > > *Subject:* Re: [SUSPECTED SPAM] [vpp-dev] IPFIX Nat Logging > > > > > > > > Hi, > > > > I tried that but I didn't get any log from IPFIX > > > > > Thanks > > > > > Regards > > > > > > > > > On Wed, Jan 2, 2019 at 9:31 AM Matus Fabian -X (matfabia - PANTHEON > TECHNOLOGIES at Cisco) < matfa...@cisco.com > wrote: > > > >> >> >> Hi, >> >> >> >> >> >> >> >> IPfix events are aggregated, to send it immediately use “ipfix flush" >> >> >> >> >> >> >> >> Matus >> >> >> >> >> >> >> >> >> >> >> >> *From:* vpp-dev@lists.fd.io < vpp-dev@lists.fd.io > *On Behalf Of* emma sdi >> >> *Sent:* Tuesday, December 25, 2018 1:49 PM >> *To:* vpp-dev < vpp-dev@lists.fd.io > >> *Subject:* [SUSPECTED SPAM] [vpp-dev] IPFIX Nat Logging >> >> >> >> >> >> >> >> Dear Vpp, >> >> >> >> I'd just configured a simple snat to check logging nat with IPFIX.I have a >> router which vpp installed and two debian machines which one of them is >> IPFIX collector. >> >> >> >> >> Here it is the topology: >> >> >> >> >> https://paste.ubuntu.com/p/Hb9vpPhq67/ >> >> >> >> >> >> >> >> >> >> The IPFIX collector software is nfcapd. I defined a ip pool with range >> 40.40.40.40-40.40.40.254: >> >> >> >> >> *nat44 add address 40.40.40.40 - 40.40.40.254* >> >> >> >> >> The interface of vpp side has ip 10.10.10.208 and the interface of >> collector side has ip 10.10.10.205 >> >> >> >> >> I defined ipfix collector with this command: >> >> >> >> >> * set ipfix exporter collector 10.10.10.205 src 10.10.10.208* >> >> >> >> >> I enabled nat ipfix logging with this command: >> >> >> >> >> *nat ipfix logging* >> >> >> >> >> >> >> >> >> >> The ipfix collector software in client1 is ran with this command: >> >> >> >> >> * nfcapd -l /root/log/ -E* >> >> >> >> >> I send ping from *client1* to *client2*. The ping has echo and reply and >> the natting process is done as I send the output of vpp trace here: >> >> >> >> >> https://paste.ubuntu.com/p/HkMqSXy5tN/ >> >> >> >> >> >> >> >> >> >> But there aren't any IPFIX log on the output of nfcapd. >> >> >> >> >> Could you please tell me what should I do for collecting nat logs with >> IPFIX. >> >> >> >> >> Thanks >> >> >> >> >> Regards >> >> >> > > -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#11877): https://lists.fd.io/g/vpp-dev/message/11877 Mute This Topic: https://lists.fd.io/mt/28911869/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [SUSPECTED SPAM] [vpp-dev] IPFIX Nat Logging
Dear Fabian, No. my collector don't receive any thing. I would appreciate if you could give me a valid config for ipfix logging. Warm Regards On Mon, Jan 7, 2019 at 9:16 AM Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) wrote: > Hi, > > > > Do you receive at least IPfix templates on collector? > > > > Matus > > > > > > *From:* khers > *Sent:* Sunday, January 6, 2019 8:58 AM > *To:* Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) < > matfa...@cisco.com> > *Cc:* vpp-dev > *Subject:* Re: [SUSPECTED SPAM] [vpp-dev] IPFIX Nat Logging > > > > Hi, > > I tried that but I didn't get any log from IPFIX > > Thanks > > Regards > > > > On Wed, Jan 2, 2019 at 9:31 AM Matus Fabian -X (matfabia - PANTHEON > TECHNOLOGIES at Cisco) wrote: > > Hi, > > > > IPfix events are aggregated, to send it immediately use “ipfix flush" > > > > Matus > > > > > > *From:* vpp-dev@lists.fd.io *On Behalf Of *emma sdi > *Sent:* Tuesday, December 25, 2018 1:49 PM > *To:* vpp-dev > *Subject:* [SUSPECTED SPAM] [vpp-dev] IPFIX Nat Logging > > > > Dear Vpp, > > I'd just configured a simple snat to check logging nat with IPFIX.I have a > router which vpp installed and two debian machines which one of them is > IPFIX collector. > > Here it is the topology: > > https://paste.ubuntu.com/p/Hb9vpPhq67/ > > > > The IPFIX collector software is nfcapd. I defined a ip pool with range > 40.40.40.40-40.40.40.254: > > *nat44 add address 40.40.40.40 - 40.40.40.254* > > The interface of vpp side has ip 10.10.10.208 and the interface of > collector side has ip 10.10.10.205 > > I defined ipfix collector with this command: > > * set ipfix exporter collector 10.10.10.205 src 10.10.10.208* > > I enabled nat ipfix logging with this command: > > *nat ipfix logging* > > > > The ipfix collector software in client1 is ran with this command: > > * nfcapd -l /root/log/ -E* > > I send ping from *client1* to *client2* . The ping has echo and reply and > the natting process is done as I send the output of vpp trace here: > > https://paste.ubuntu.com/p/HkMqSXy5tN/ > > > > But there aren't any IPFIX log on the output of nfcapd. > > Could you please tell me what should I do for collecting nat logs with > IPFIX. > > Thanks > > Regards > > -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#11877): https://lists.fd.io/g/vpp-dev/message/11877 Mute This Topic: https://lists.fd.io/mt/28911869/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [SUSPECTED SPAM] [vpp-dev] IPFIX Nat Logging
Hi, Do you receive at least IPfix templates on collector? Matus From: khers Sent: Sunday, January 6, 2019 8:58 AM To: Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) Cc: vpp-dev Subject: Re: [SUSPECTED SPAM] [vpp-dev] IPFIX Nat Logging Hi, I tried that but I didn't get any log from IPFIX Thanks Regards On Wed, Jan 2, 2019 at 9:31 AM Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) mailto:matfa...@cisco.com>> wrote: Hi, IPfix events are aggregated, to send it immediately use “ipfix flush" Matus From: vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> mailto:vpp-dev@lists.fd.io>> On Behalf Of emma sdi Sent: Tuesday, December 25, 2018 1:49 PM To: vpp-dev mailto:vpp-dev@lists.fd.io>> Subject: [SUSPECTED SPAM] [vpp-dev] IPFIX Nat Logging Dear Vpp, I'd just configured a simple snat to check logging nat with IPFIX.I have a router which vpp installed and two debian machines which one of them is IPFIX collector. Here it is the topology: https://paste.ubuntu.com/p/Hb9vpPhq67/ The IPFIX collector software is nfcapd. I defined a ip pool with range 40.40.40.40-40.40.40.254: nat44 add address 40.40.40.40 - 40.40.40.254 The interface of vpp side has ip 10.10.10.208 and the interface of collector side has ip 10.10.10.205 I defined ipfix collector with this command: set ipfix exporter collector 10.10.10.205 src 10.10.10.208 I enabled nat ipfix logging with this command: nat ipfix logging The ipfix collector software in client1 is ran with this command: nfcapd -l /root/log/ -E I send ping from client1 to client2 . The ping has echo and reply and the natting process is done as I send the output of vpp trace here: https://paste.ubuntu.com/p/HkMqSXy5tN/ But there aren't any IPFIX log on the output of nfcapd. Could you please tell me what should I do for collecting nat logs with IPFIX. Thanks Regards -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#11849): https://lists.fd.io/g/vpp-dev/message/11849 Mute This Topic: https://lists.fd.io/mt/28911869/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [SUSPECTED SPAM] [vpp-dev] IPFIX Nat Logging
Hi, I tried that but I didn't get any log from IPFIX Thanks Regards On Wed, Jan 2, 2019 at 9:31 AM Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) wrote: > Hi, > > > > IPfix events are aggregated, to send it immediately use “ipfix flush" > > > > Matus > > > > > > *From:* vpp-dev@lists.fd.io *On Behalf Of *emma sdi > *Sent:* Tuesday, December 25, 2018 1:49 PM > *To:* vpp-dev > *Subject:* [SUSPECTED SPAM] [vpp-dev] IPFIX Nat Logging > > > > Dear Vpp, > > I'd just configured a simple snat to check logging nat with IPFIX.I have a > router which vpp installed and two debian machines which one of them is > IPFIX collector. > > Here it is the topology: > > https://paste.ubuntu.com/p/Hb9vpPhq67/ > > > > The IPFIX collector software is nfcapd. I defined a ip pool with range > 40.40.40.40-40.40.40.254: > > *nat44 add address 40.40.40.40 - 40.40.40.254* > > The interface of vpp side has ip 10.10.10.208 and the interface of > collector side has ip 10.10.10.205 > > I defined ipfix collector with this command: > > * set ipfix exporter collector 10.10.10.205 src 10.10.10.208* > > I enabled nat ipfix logging with this command: > > *nat ipfix logging* > > > > The ipfix collector software in client1 is ran with this command: > > * nfcapd -l /root/log/ -E* > > I send ping from *client1* to * client2* . The ping has echo and reply > and the natting process is done as I send the output of vpp trace here: > > https://paste.ubuntu.com/p/HkMqSXy5tN/ > > > > But there aren't any IPFIX log on the output of nfcapd. > > Could you please tell me what should I do for collecting nat logs with > IPFIX. > > Thanks > > Regards > -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#11844): https://lists.fd.io/g/vpp-dev/message/11844 Mute This Topic: https://lists.fd.io/mt/28911869/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [SUSPECTED SPAM] [vpp-dev] IPFIX Nat Logging
Hi, IPfix events are aggregated, to send it immediately use “ipfix flush" Matus From: vpp-dev@lists.fd.io On Behalf Of emma sdi Sent: Tuesday, December 25, 2018 1:49 PM To: vpp-dev Subject: [SUSPECTED SPAM] [vpp-dev] IPFIX Nat Logging Dear Vpp, I'd just configured a simple snat to check logging nat with IPFIX.I have a router which vpp installed and two debian machines which one of them is IPFIX collector. Here it is the topology: https://paste.ubuntu.com/p/Hb9vpPhq67/ The IPFIX collector software is nfcapd. I defined a ip pool with range 40.40.40.40-40.40.40.254: nat44 add address 40.40.40.40 - 40.40.40.254 The interface of vpp side has ip 10.10.10.208 and the interface of collector side has ip 10.10.10.205 I defined ipfix collector with this command: set ipfix exporter collector 10.10.10.205 src 10.10.10.208 I enabled nat ipfix logging with this command: nat ipfix logging The ipfix collector software in client1 is ran with this command: nfcapd -l /root/log/ -E I send ping from client1 to client2 . The ping has echo and reply and the natting process is done as I send the output of vpp trace here: https://paste.ubuntu.com/p/HkMqSXy5tN/ But there aren't any IPFIX log on the output of nfcapd. Could you please tell me what should I do for collecting nat logs with IPFIX. Thanks Regards -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#11813): https://lists.fd.io/g/vpp-dev/message/11813 Mute This Topic: https://lists.fd.io/mt/28911869/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[vpp-dev] IPFIX Nat Logging
Dear Vpp, I'd just configured a simple snat to check logging nat with IPFIX.I have a router which vpp installed and two debian machines which one of them is IPFIX collector. Here it is the topology: https://paste.ubuntu.com/p/Hb9vpPhq67/ The IPFIX collector software is nfcapd. I defined a ip pool with range 40.40.40.40-40.40.40.254: *nat44 add address 40.40.40.40 - 40.40.40.254* The interface of vpp side has ip 10.10.10.208 and the interface of collector side has ip 10.10.10.205 I defined ipfix collector with this command: * set ipfix exporter collector 10.10.10.205 src 10.10.10.208* I enabled nat ipfix logging with this command: *nat ipfix logging* The ipfix collector software in client1 is ran with this command: * nfcapd -l /root/log/ -E* I send ping from *client1* to *client2* . The ping has echo and reply and the natting process is done as I send the output of vpp trace here: https://paste.ubuntu.com/p/HkMqSXy5tN/ But there aren't any IPFIX log on the output of nfcapd. Could you please tell me what should I do for collecting nat logs with IPFIX. Thanks Regards -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#11774): https://lists.fd.io/g/vpp-dev/message/11774 Mute This Topic: https://lists.fd.io/mt/28852322/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
