Ok thanks... I am now manage to have it running for multiple routers by
reading your documantation.
Do you know if their is a way to analyze the top talkers based on their
service usage?
----- Original Message -----
From: "Mike Hunter" <[EMAIL PROTECTED]>
To: "Palis Michalis" <[EMAIL PROTECTED]>
Cc: <[email protected]>
Sent: Thursday, May 11, 2006 6:18 PM
Subject: Re: [Flow-tools] Problems with flow capture
You can't have different processes trying to listen on the same port
(9990).
If you want to have three different routers make one set of files, you can
just have one process and tell it to receive flows from "0" so that it
will take them from anywhere.
If you want to have three sets of files, make separate flow directories
and use different ports for each router.
Mike
On May 11 at 11:33, "Palis Michalis" wrote:
Here is the config of flow-capture file. It only captures the first
router
on the first line. Placing a # at the first line and restarting the
flow-capture-inti, it start capturing data from the 2nd router etc...
OS is redhat release 9
more flow-capture-init
#!/bin/sh
# description: Start Flow-Capture
# chkconfig: 2345 95 00
case "$1" in
'start')
/usr/internet/flow-tools-0.67/bin/flow-capture -w /data/netflow/ft
0/192.168.1.1
/9990 -S5 -V5 -E3G -n 287 -N 0 -R
/usr/internet/flow-tools-0.67/bin/linkme
/usr/internet/flow-tools-0.67/bin/flow-capture -w /data/netflow/ft
0/192.168.1.
2/9990 -S5 -V5 -E3G -n 287 -N 0 -R
/usr/internet/flow-tools-0.67/bin/linkme
/usr/internet/flow-tools-0.67/bin/flow-capture -w /data/netflow/ft
0/192.168.1.3
/9990 -S5 -V5 -E3G -n 287 -N 0 -R
/usr/internet/flow-tools-0.67/bin/linkme
touch /var/lock/subsys/startflows
;;
'stop')
killall -9 /usr/internet/flow-tools-0.67/bin/flow-capture
rm -f /var/lock/subsys/startflows
;;
*)
echo "Usage: $0 { start | stop }"
;;
esac
exit 0
----- Original Message -----
From: "Mike Hunter" <[EMAIL PROTECTED]>
To: "Palis Michalis" <[EMAIL PROTECTED]>
Cc: <[email protected]>
Sent: Wednesday, May 10, 2006 7:45 PM
Subject: Re: [Flow-tools] Problems with flow capture
>On May 10 at 10:44, "Palis Michalis" wrote:
>
>>I have flow tools running but we are facing a problem with capturing
>>Data.. Configuring flow-capture to capture data from more than one
>>router, does not work. I I have more than one entries in the
>>configuration file, I captures data only from the first source. Also
>>ony
>>one proccess is running on the server.
>
>What OS are you using? Can you show us the configuration file? If you
>envoke flow-capture from the command line, does everything work as
>expected? Have you checked the directory permissions?
>
>Mike
_______________________________________________
Flow-tools mailing list
[EMAIL PROTECTED]
http://mailman.splintered.net/mailman/listinfo/flow-tools
