kern/98875: ng_netflow not send data to flow collector

Igor Russian im at kaba.org.ua
Mon Jun 12 21:30:29 UTC 2006


>Number:         98875
>Category:       kern
>Synopsis:       ng_netflow not send data to flow collector
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Mon Jun 12 21:30:26 GMT 2006
>Closed-Date:
>Last-Modified:
>Originator:     Igor Russian
>Release:        6.1-RELEASE
>Organization:
Kaba Ltd
>Environment:
FreeBSD esm.com.ua 6.1-RELEASE FreeBSD 6.1-RELEASE #1: Sun Jun 11 11:12:58 EEST
2006     root at esm.com.ua:/usr/src/sys/i386/compile/ESM  i386
>Description:
ng_netflow config:

/usr/sbin/ngctl -f- <<-SEQ
 mkpeer vlan0: tee lower right
 connect vlan0: vlan0:lower upper left
 mkpeer vlan0:lower netflow right2left iface0
 name vlan0:lower.right2left netflow
 msg netflow: setifindex { iface=0 index=4 }

 mkpeer vlan23: tee lower right
 connect vlan23: vlan23:lower upper left
 connect netflow: vlan23:lower iface1 right2left
 msg netflow: setifindex { iface=1 index=15 }

 mkpeer netflow: ksocket export inet/dgram/udp
 msg netflow:export connect inet/127.0.0.1:9996
SEQ

Result of run command 'flowctl netflow show':
root at esm [4:22] /var/db/flows #flowctl netflow show
SrcIf         SrcIPaddress    DstIf         DstIPaddress    Pr SrcP DstP  Pkts
lo0           192.168.0.253   vlan0         192.168.0.254   17 e2ef 0035      6
lo0           192.168.0.253   vlan0         192.168.0.254    6 0016 ce2a     15
lo0           192.168.0.55    vlan0         192.168.0.255   17 0089 0089     12
lo0           192.168.0.253   vlan23        194.87.0.50      1 0000 0000      6

Flow collector:

root at esm [0:21] /root #pkg_info | grep flow
flow-tools-0.68_1   Suite of tools and library to work with netflow data

Check running collector:
root at esm [4:23] /var/db/flows #ps axww | grep flow
 2349  ??  Ss     0:00,01 /usr/local/bin/flow-capture -p /var/run/flow-capture.pid -w /var/db/flows -S5 -E5G 127.0.0.1/0/9996

But data on a collector do not get.


>How-To-Repeat:

>Fix:

>Release-Note:
>Audit-Trail:
>Unformatted:


More information about the freebsd-bugs mailing list