forum.lissyara.su

Добавлено: **2008-09-11 8:08:55**

Кто работал с этим портом?
У меня поначалу заработало вместе с netams-ом, но потом не долго думая начал писать логи netams:

Код: Выделить всё

11.09.2008 18:04:01.1431 ds_netflow:1 [WARN]: NF:1 awaited seq 2257, received 2168 from 00 (4294967207 flows are lost)
11.09.2008 18:04:01.1439 ds_netflow:1 [WARN]: NF:1 awaited seq 2271, received 2168 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1445 ds_netflow:1 [WARN]: NF:1 awaited seq 2271, received 2168 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1452 ds_netflow:1 [WARN]: NF:1 awaited seq 2271, received 2168 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1459 ds_netflow:1 [WARN]: NF:1 awaited seq 2271, received 2168 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1466 ds_netflow:1 [WARN]: NF:1 awaited seq 2271, received 2168 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1473 ds_netflow:1 [WARN]: NF:1 awaited seq 2271, received 2168 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1481 ds_netflow:1 [WARN]: NF:1 awaited seq 2271, received 2168 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1488 ds_netflow:1 [WARN]: NF:1 awaited seq 2271, received 2165 from 00 (4294967190 flows are lost)
11.09.2008 18:04:01.1495 ds_netflow:1 [WARN]: NF:1 awaited seq 2268, received 2165 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1501 ds_netflow:1 [WARN]: NF:1 awaited seq 2268, received 2165 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1508 ds_netflow:1 [WARN]: NF:1 awaited seq 2268, received 2165 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1515 ds_netflow:1 [WARN]: NF:1 awaited seq 2268, received 2165 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1523 ds_netflow:1 [WARN]: NF:1 awaited seq 2268, received 2165 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1529 ds_netflow:1 [WARN]: NF:1 awaited seq 2268, received 2165 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1536 ds_netflow:1 [WARN]: NF:1 awaited seq 2268, received 2165 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1543 ds_netflow:1 [WARN]: NF:1 awaited seq 2268, received 2165 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1550 ds_netflow:1 [WARN]: NF:1 awaited seq 2268, received 2165 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1557 ds_netflow:1 [WARN]: NF:1 awaited seq 2268, received 2165 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1564 ds_netflow:1 [WARN]: NF:1 awaited seq 2268, received 2165 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1571 ds_netflow:1 [WARN]: NF:1 awaited seq 2268, received 2165 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1578 ds_netflow:1 [WARN]: NF:1 awaited seq 2268, received 2165 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1587 ds_netflow:1 [WARN]: NF:1 awaited seq 2268, received 2165 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1594 ds_netflow:1 [WARN]: NF:1 awaited seq 2268, received 2165 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1602 ds_netflow:1 [WARN]: NF:1 awaited seq 2268, received 2165 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1610 ds_netflow:1 [WARN]: NF:1 awaited seq 2268, received 2165 from 00 (4294967193 flows are lost)
11.09.2008 18:04:01.1614 ds_netflow:1 [WARN]: NF:1 awaited seq 2224, received 2254 from 00 (30 flows are lost)

как понимаю он их либо не захватывает либо просто откидывае, что может быть?

Добавлено: **2008-09-11 8:10:14**

Извиняюсь, но опять не выделил))) Обещаю исправится

Добавлено: **2008-11-21 18:20:40**

Конфиг netams предоставь.
Скорее всего у тебя там netflow источник не localhost.
У меня такая же проблема была, но поскольку всё на одной машине стоит, сделал так:

Код: Выделить всё

service data-source 0
type netflow
listen 127.0.0.1 6677
source 127.0.0.1

Раньше было:

Код: Выделить всё

listen 192.168.192.168 6677
source 192.168.192.168

Поскольку была другая система, сделал липовый интерфейс на этой же машине (одновременно является приёмником-коллектором mirror-пакетов с cisco и монитором).
Но оказалось так теряются пакеты, правда, не так однотипно (числа менялись).

И softflowd соответственно (# cat /etc/rc.conf | grep softflow):

Код: Выделить всё

softflowd_enable="YES"
softflowd_interfaces="bge0"
softflowd_netflow_host="127.0.0.1"
softflowd_netflow_port="6677"

forum.lissyara.su

Softflowd

Softflowd

Re: Softflowd

Re: Softflowd