This could have something to do it. This is a primarily IPv6 network, but the
first source for netflow data is an ASA and it can’t do IPv6 netflow.
Thanks,
Paul.
From: Phil Mayers [mailto:[email protected]]
Sent: Thursday, July 11, 2013 1:40 PM
To: Fabián Mejía; [email protected]
Subject: Re: [Nfdump-discuss] nfcapd not getting any data on new install
Phil Mayers <[email protected]<mailto:[email protected]>> wrote:
"Fabián Mejía" <[email protected]<mailto:[email protected]>>
wrote:
Hello Paul
I still have this issue (partially). People in this list said me there
is a rule blocking the traffic, but iptables/ip6tables and selinux are
shutdown or disable (how you say). I found that nfdump saves data only
if they come from same network (from server's point of view), I
explained it here:
http://www.mail-archive.com/[email protected]/msg00810.html
Google "Linux log Martians" and "Linux rp filter". You're probably getting
caught out by asymmetric routing.
See also
https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Security_Guide/sect-Security_Guide-Server_Security-Reverse_Path_Filtering.html
--
Sent from my phone with, please excuse brevity and typos
------------------------------------------------------------------------------
See everything from the browser to the database with AppDynamics
Get end-to-end visibility with application monitoring from AppDynamics
Isolate bottlenecks and diagnose root cause in seconds.
Start your free trial of AppDynamics Pro today!
http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk
_______________________________________________
Nfdump-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
