Thank you for a prompt reply.
You mean for this case it should be:
HPProcurve Sflow agent: 192.168.xx.xx
Sflow receiver: 172.16.59.xx
Sflow port 6343
VLAN 1234 peer1 port A1 IP 192.168.1.xx Sflow enabled
VLAN 5678 peer2 port A2 IP 192.168.2.xx Sflow enabled
%sources = (
'vlan1234' => { 'port' => '6343', 'IP' => '192.168.1.xx' },
'vlan5678' => { 'port' => '6343', 'IP' => '192.168.2.xx' },
);
How about for a different switch? would it be ok to just change the sflow port
number for each switch, so i can identify that sflow port comes from an
specified switch?
Thanks.
-Mike
--- On Tue, 6/22/10, Peter Haag <[email protected]> wrote:
> From: Peter Haag <[email protected]>
> Subject: Re: [Nfsen-discuss] Netflow Sources Management
> To: "Michael P. Carel" <[email protected]>
> Cc: [email protected]
> Date: Tuesday, June 22, 2010, 10:26 PM
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
>
>
> On 6/22/10 16:06, Michael P. Carel wrote:
> > Hi to all;
> >
> > I'm just a newbie in netflow/sflow monitoring and i've
> just installed nfsen 1.3.3 . I'm wondering on how to define
> multiple netflow/sflow data coming from a single source in
> nfsen.conf . Let's say I need to monitor 2 ports in a switch
> that belong to a separate vlan.
> > HPProcurve Sflow agent: 192.168.xx.xx
> > Sflow
> receiver: 172.16.59.xx
> > Sflow port :
> 6343
> > VLAN 1234 peer1 port A1 IP 192.168.1.xx Sflow
> enabled
> > VLAN 5678 peer2 port A2 IP 192.168.2.xx
> >
> > Currently I enable port A1 for SFLOW, and configure
> nfsen.conf to:
> >
> > %sources = (
> > 'BkBone' =>{ 'port' =>
> '6343', 'col' => '#0000ff', 'type' => 'sflow' },);
> >
> > I have now the traffic for A1, but I don't know how to
> add A2? Please help me on doing this..
>
> nfsen is able to distinguish sources according to ports
> and/or IPs. See also etc/nfsen-dist.conf in the tar ball.
> NfSen puts all flows from a given IP address and port into
> the same file, which means you can not split sources from
> same IP/port into different fles.
>
> Hope, this helps
> - Peter
> >
> >
> > Tnx in advance,
> >
> > Mike
> >
> >
> >
> >
> >
> >
> ------------------------------------------------------------------------------
> > ThinkGeek and WIRED's GeekDad team up for the Ultimate
>
> > GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to
> the
> > lucky parental unit. See the prize list and
> enter to win:
> > http://p.sf.net/sfu/thinkgeek-promo
> > _______________________________________________
> > Nfsen-discuss mailing list
> > [email protected]
> > https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
>
> - --
> _______ SWITCH - The Swiss Education and Research Network
> ______
> Peter Haag, Security Engineer, Member of SWITCH
> CERT
> PGP fingerprint: D9 31 D5 83 03 95 68 BA FB 84 CA 94
> AB FC 5D D7
> SWITCH, Werdstrasse 2, P.O. Box,
> CH-8021 Zurich, Switzerland
> E-mail: [email protected]
> Web: http://www.switch.ch/
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.5 (Darwin)
>
> iQCVAwUBTCDIL/5AbZRALNr/AQJtRQQAnPs0yHt89ay78oUlzIrU1oZoI80YEy+7
> xrVqhQnB3eohLXkkl/xbmW80hrnQO2q8oRH/hcRU23KR7Y1R0CeV6ZVScBdAGTc0
> GSuw/f+x70R+tOFQnj2U3S2bo1QB9NPUU6zheKb691xEWEv2+fZvMb0hXDgX/MTj
> 845wtU2uJ2E=
> =xQ5F
> -----END PGP SIGNATURE-----
>
------------------------------------------------------------------------------
ThinkGeek and WIRED's GeekDad team up for the Ultimate
GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the
lucky parental unit. See the prize list and enter to win:
http://p.sf.net/sfu/thinkgeek-promo
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
