On Dec 14, "Ben Beuchler" wrote: > > >> Is your router still exporting flows? > > >> > > >> rtr> show ip flow export > > >> and > > >> rtr> show ip cache flow > > > > > > Yep. In fact, tcpdump shows the packets arriving on the flow- > > > capture box. > > > > Do you see flows when you do: > > > > $ flow-receive 0/0/9800 | flow-print > > Nothing shows up. Over about 1 minute tcpdump showed around 500 udp > packets received on 9800, but flow-receive didn't output anything.
Do you have a firewall configured that is keeping the data from coming through? Can you run netcat as a server on your chosen netflow port and make netcat connections from various places into that netcat listener and see what works and what doesn't? TCPDump may be seeing data that the OS itself doesn't because of a host-based firewall. If netcat can't see it, there's a network/firewall problem. _______________________________________________ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools
