> Ugh :( My thoughts exactly.
> So, where we're at is that you are definitely receiving the flows, but > flow-capture and flow-receive don't seem to "see them." Correct. > Is flow-capture making "empty" flow files or is it not making anything at > all? Yeah, it creates an 88 byte file in my flows directory, consistent with the configured flow-capture naming/nesting convention. > (I think you already have, but...) have you tried flow-receive? Yep. I let it run for about 5 minutes. In that same time frame, tcpdump grabbed several hundred UDP packets full of flows, the router showed a few thousand flows as being sent, and flow-receive didn't output anything. > Are you receiving on a port >= 1024, i.e. you're sure this isn't a > privilege problem? I'm using port 9800 and running flow-capture/receive as root. > What version of netflow are you exporting from your router? The router (A Cisco 3640) is configured to send version 5. -Ben _______________________________________________ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools
