[133217] in North American Network Operators' Group
Re: ipfix/netflow/sflow generator for Linux
daemon@ATHENA.MIT.EDU (Matthew Palmer)
Mon Dec 6 14:32:26 2010
Date: Tue, 7 Dec 2010 06:31:41 +1100
From: Matthew Palmer <mpalmer@hezmatt.org>
To: nanog@nanog.org
Mail-Followup-To: nanog@nanog.org
In-Reply-To: <!&!AAAAAAAAAAAYAAAAAAAAAF14xRJYlm1EkOxD1AqQStBCgQAAEAAAAM+R4/V/D8JCpJLSHOeeUQUBAAAAAA==@fuhell.com>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Mon, Dec 06, 2010 at 02:15:10PM -0500, Thomas York wrote:
> I've had the best luck with ipcad. The only thing that seems to not work
> with it is that it doesn't correctly give the interface number in the flow
> information. It refers to all interfaces as interface 65535. I've tried the
> config option for ipcad to map an interface directly to an SNMP interface
> ID, but that option of the config file seems to be ignored.
>
> Ntop functionally does exactly what I need, but it's extremely buggy. It
> segfaults after a few minutes, regardless of Linux distro or Ntop version.
> So..any ideas on what I can do to get good flow information from our Linux
> routers?
Fix ipcad to send the interface number.
- Matt
--
Just because we work at a University doesn't mean we're surrounded by smart
people.
-- Brian Kantor, in the monastery
