On Jul 04 at 20:44, "Kelvin Tang" wrote: > I'm running 0.68 on Solaris 8 SPARC, complie with gcc 3.4.2. Everything > complie and install fine and netflow logged successfully using > flow-capture. However, when try to replicate the flow to another server > using flow-fanout, it doesn't work. > > Receiving UDP 9996 traffic from Cisco and replicate to [130.18.36.1] on > UDP 9996, with spoof option > > # ./flow-fanout -D -s 0/0/9996 0/130.18.36.1/9996 > flow-fanout: setsockopt(size=262144) > flow-fanout: bind(loc_addr): Address already in use > > I'm also have other try but still failed. > > # ./flow-fanout -D 0/0/9996 0/0/9997 > flow-fanout: setsockopt(size=262144) > flow-fanout: bind(loc_addr): Address already in use > > I haven't got any successful flow-fanout running so far. I have search > most archive but no idea. Anyone encountered this before? Please help.
Are you running flow-fanout as root? Does it work when you don't do spoofing? I'd guess that the OS isn't amenable to the idea of you doing the spoofing. Mike _______________________________________________ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools
