nanog mailing list archives

Re: ipfix/netflow/sflow generator for Linux


From: Matthew Palmer <mpalmer () hezmatt org>
Date: Tue, 7 Dec 2010 06:31:41 +1100

On Mon, Dec 06, 2010 at 02:15:10PM -0500, Thomas York wrote:
I've had the best luck with ipcad. The only thing that seems to not work
with it is that it doesn't correctly give the interface number in the flow
information. It refers to all interfaces as interface 65535. I've tried the
config option for ipcad to map an interface directly to an SNMP interface
ID, but that option of the config file seems to be ignored.

Ntop functionally does exactly what I need, but it's extremely buggy. It
segfaults after a few minutes, regardless of Linux distro or Ntop version.
So..any ideas on what I can do to get good flow information from our Linux
routers?

Fix ipcad to send the interface number.

- Matt

-- 
Just because we work at a University doesn't mean we're surrounded by smart
people.
                -- Brian Kantor, in the monastery


Current thread: