Hi to all;
I'm having a hard time configuring hpprocurve 5300 sflow. I'm receiving errors
"Unknown flow source"
Here's how I configure it:
sflow agent
Version : 1.3;HP;E.11.03
Agent Address : 192.168.181.180
sflow destination
sflow : Enabled
Datagrams Sent : 116417
Destination Address : 172.16.59.108
Receiver Port : 6343
Owner : nfdump
Timeout (seconds) : 99991728
Max Datagram Size : 1400
Datagram Version Support : 5
Port | Sampling Dropped | Polling
| Enabled Rate Header Samples | Enabled Interval
----- + ------- -------- ------ ---------- + ------- --------
Trk2 Yes 50 128 218 Yes 0
Trk3 Yes 50 128 268 Yes 0
VLAN | IP Config IP Address Port
------------ + ---------- --------------- -------
bckbone | Manual 192.168.181.251
Peer1 | Manual 192.168.181.29 Trk3
Peer2 | Manual 192.168.125.6 Trk2
nfsen.conf
%sources = (
'Peer2' =>{ 'port' => '6343', 'col' => '#0000ff', 'IP' => '192.168.125.6'
,'type' => 'sflow' },
'Peer1' =>{ 'port' => '6343', 'col' => '#ffff00', 'IP' => '192.168.181.29'
,'type' => 'sflow' },
);
Here's the error:
Jun 25 08:55:18 dns-nagios sfcapd[23178]: Skip UDP packet. Ignored packets so
far 9 packets
Jun 25 08:55:20 dns-nagios sfcapd[23178]: Unknown flow source: '192.168.181.251'
Jun 25 08:55:20 dns-nagios sfcapd[23178]: Skip UDP packet. Ignored packets so
far 10 packets
Jun 25 08:55:22 dns-nagios sfcapd[23178]: Unknown flow source: '192.168.181.251'
tcpdump result from nfdump:
# tcpdump -i eth1 port 6343
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth1, link-type EN10MB (Ethernet), capture size 96 bytes
09:12:58.728436 IP 192.168.181.251.mini-sql > 172.16.59.108.sflow: UDP, length
728
09:13:00.727097 IP 192.168.181.251.mini-sql > 172.16.59.108.sflow: UDP, length
660
09:13:02.744447 IP 192.168.181.251.mini-sql > 172.16.59.108.sflow: UDP, length
592
09:13:04.731880 IP 192.168.181.251.mini-sql > 172.16.59.108.sflow: UDP, length
660
09:13:06.731605 IP 192.168.181.251.mini-sql > 172.16.59.108.sflow: UDP, length
732
Hope someone can help me on this.
Tnx,
--Mike
------------------------------------------------------------------------------
ThinkGeek and WIRED's GeekDad team up for the Ultimate
GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the
lucky parental unit. See the prize list and enter to win:
http://p.sf.net/sfu/thinkgeek-promo
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss