Patrick,
On Jul 24, 2006, at 10:08 AM, Patrick Liu wrote:
Hello,
We are recently trying to get flow-tools working with a Juniper
Router. The router is configured to export V8 Netflow to a Linux
box where the flow-tools are installed. However the flow-tools
can't seem to be able to display the information. We are getting
the following error messages. The Juniper is running the 7.5R2.8
code. The local dump of the cflowd seems to show that the router
generates the netflow data correctly.
flow-tools does not support translation from one v8 aggregation
method to another, which seems to be what's happening on your system.
I hope that someone could point us to the direction of getting it
working.
[EMAIL PROTECTED] 2006-07-24]# /usr/local/netflow/bin/flow-receive -
V8.3 0/0/8082
| /usr/local/netflow/bin/flow-print
flow-receive: setsockopt(size=4194304)
src/mask srcAS input flows octets
packets duration
flow-receive: Unexpected PDU: src_ip=4.17.90.60 multi v8 oagg=3
agg=2 over=2 ver=2
flow-receive: Unexpected PDU: src_ip=4.17.90.60 multi v8 oagg=3
agg=2 over=2 ver=2
flow-receive: New exporter: time=1153753305 src_ip=4.232.215.99
dst_ip=4.17.90.60 d_version=8
flow-receive: Unexpected PDU: src_ip=4.17.90.60 multi v8 oagg=3
agg=4 over=2 ver=2
flow-receive: Unexpected PDU: src_ip=4.17.90.60 multi v8 oagg=3
agg=5 over=2 ver=2
flow-receive: Unexpected PDU: src_ip=4.17.90.60 multi v8 oagg=3
agg=5 over=2 ver=2
In this case, you've configured flow-receive to expect aggregation
method 3 (oagg=#), but the flows coming in from the juniper router
have aggregation methods 2, 4, and 5 (agg=#).
HTH,
alex
_______________________________________________
Flow-tools mailing list
[EMAIL PROTECTED]
http://mailman.splintered.net/mailman/listinfo/flow-tools
