Softflowd

[guest__]

Кто работал с этим портом?
У меня поначалу заработало вместе с netams-ом, но потом не долго думая начал писать логи netams:

Код: Выделить всё

11.09.2008 18:04:01.1431 ds_netflow:1 [WARN]: NF:1 awaited seq 2257, received 2168 from 00 (4294967207 flows are lost)
11.09.2008 18:04:01.1439 ds_netflow:1 [WARN]: NF:1 awaited seq 2271, received 2168 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1445 ds_netflow:1 [WARN]: NF:1 awaited seq 2271, received 2168 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1452 ds_netflow:1 [WARN]: NF:1 awaited seq 2271, received 2168 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1459 ds_netflow:1 [WARN]: NF:1 awaited seq 2271, received 2168 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1466 ds_netflow:1 [WARN]: NF:1 awaited seq 2271, received 2168 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1473 ds_netflow:1 [WARN]: NF:1 awaited seq 2271, received 2168 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1481 ds_netflow:1 [WARN]: NF:1 awaited seq 2271, received 2168 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1488 ds_netflow:1 [WARN]: NF:1 awaited seq 2271, received 2165 from 00 (4294967190 flows are lost)
11.09.2008 18:04:01.1495 ds_netflow:1 [WARN]: NF:1 awaited seq 2268, received 2165 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1501 ds_netflow:1 [WARN]: NF:1 awaited seq 2268, received 2165 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1508 ds_netflow:1 [WARN]: NF:1 awaited seq 2268, received 2165 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1515 ds_netflow:1 [WARN]: NF:1 awaited seq 2268, received 2165 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1523 ds_netflow:1 [WARN]: NF:1 awaited seq 2268, received 2165 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1529 ds_netflow:1 [WARN]: NF:1 awaited seq 2268, received 2165 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1536 ds_netflow:1 [WARN]: NF:1 awaited seq 2268, received 2165 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1543 ds_netflow:1 [WARN]: NF:1 awaited seq 2268, received 2165 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1550 ds_netflow:1 [WARN]: NF:1 awaited seq 2268, received 2165 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1557 ds_netflow:1 [WARN]: NF:1 awaited seq 2268, received 2165 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1564 ds_netflow:1 [WARN]: NF:1 awaited seq 2268, received 2165 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1571 ds_netflow:1 [WARN]: NF:1 awaited seq 2268, received 2165 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1578 ds_netflow:1 [WARN]: NF:1 awaited seq 2268, received 2165 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1587 ds_netflow:1 [WARN]: NF:1 awaited seq 2268, received 2165 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1594 ds_netflow:1 [WARN]: NF:1 awaited seq 2268, received 2165 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1602 ds_netflow:1 [WARN]: NF:1 awaited seq 2268, received 2165 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1610 ds_netflow:1 [WARN]: NF:1 awaited seq 2268, received 2165 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1614 ds_netflow:1 [WARN]: NF:1 awaited seq 2224, received 2254 from 00 (30 flows are lost)

как понимаю он их либо не захватывает либо просто откидывае, что может быть?

[Хостинг HostFood.ru]

Тарифы на хостинг в России, от 12 рублей: https://www.host-food.ru/tariffs/hosting/
Тарифы на виртуальные сервера (VPS/VDS/KVM) в РФ, от 189 руб.: https://www.host-food.ru/tariffs/virtualny-server-vps/
Выделенные сервера, Россия, Москва, от 2000 рублей (HP Proliant G5, Intel Xeon E5430 (2.66GHz, Quad-Core, 12Mb), 8Gb RAM, 2x300Gb SAS HDD, P400i, 512Mb, BBU):
https://www.host-food.ru/tariffs/vydelennyi-server-ds/
Недорогие домены в популярных зонах: https://www.host-food.ru/domains/

[guest__]

Извиняюсь, но опять не выделил))) Обещаю исправится

[roygbiv]

Конфиг netams предоставь.
Скорее всего у тебя там netflow источник не localhost.
У меня такая же проблема была, но поскольку всё на одной машине стоит, сделал так:

Код: Выделить всё

service data-source 0
type netflow
listen 127.0.0.1 6677
source 127.0.0.1

Раньше было:

Код: Выделить всё

listen 192.168.192.168 6677
source 192.168.192.168

Поскольку была другая система, сделал липовый интерфейс на этой же машине (одновременно является приёмником-коллектором mirror-пакетов с cisco и монитором).
Но оказалось так теряются пакеты, правда, не так однотипно (числа менялись).

И softflowd соответственно (# cat /etc/rc.conf | grep softflow):

Код: Выделить всё

softflowd_enable="YES"
softflowd_interfaces="bge0"
softflowd_netflow_host="127.0.0.1"
softflowd_netflow_port="6677"