-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 25/6/10 3:22 AM, Michael P. Carel wrote:
> Hi to all;
>
> I'm having a hard time configuring hpprocurve 5300 sflow. I'm receiving
> errors "Unknown flow source"
>
> Here's how I configure it:
>
> sflow agent
>
> Version : 1.3;HP;E.11.03
> Agent Address : 192.168.181.180
>
> sflow destination
>
> sflow : Enabled
> Datagrams Sent : 116417
> Destination Address : 172.16.59.108
> Receiver Port : 6343
> Owner : nfdump
> Timeout (seconds) : 99991728
> Max Datagram Size : 1400
> Datagram Version Support : 5
>
> Port | Sampling Dropped | Polling
> | Enabled Rate Header Samples | Enabled Interval
> ----- + ------- -------- ------ ---------- + ------- --------
>
> Trk2 Yes 50 128 218 Yes 0
> Trk3 Yes 50 128 268 Yes 0
>
> VLAN | IP Config IP Address Port
> ------------ + ---------- --------------- -------
> bckbone | Manual 192.168.181.251
> Peer1 | Manual 192.168.181.29 Trk3
> Peer2 | Manual 192.168.125.6 Trk2
>
>
> nfsen.conf
>
> %sources = (
> 'Peer2' =>{ 'port' => '6343', 'col' => '#0000ff', 'IP' => '192.168.125.6'
> ,'type' => 'sflow' },
> 'Peer1' =>{ 'port' => '6343', 'col' => '#ffff00', 'IP' =>
> '192.168.181.29' ,'type' => 'sflow' },
> );
You configured two different IPs. You need to configure source sender IP
address to tell sfcapd how to separate flow
sources.
If you only have a single IP, sending you the data, sfcapd can not separate the
flows.
- Peter
>
> Here's the error:
>
> Jun 25 08:55:18 dns-nagios sfcapd[23178]: Skip UDP packet. Ignored packets so
> far 9 packets
> Jun 25 08:55:20 dns-nagios sfcapd[23178]: Unknown flow source:
> '192.168.181.251'
> Jun 25 08:55:20 dns-nagios sfcapd[23178]: Skip UDP packet. Ignored packets so
> far 10 packets
> Jun 25 08:55:22 dns-nagios sfcapd[23178]: Unknown flow source:
> '192.168.181.251'
>
>
> tcpdump result from nfdump:
>
> # tcpdump -i eth1 port 6343
> tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
> listening on eth1, link-type EN10MB (Ethernet), capture size 96 bytes
> 09:12:58.728436 IP 192.168.181.251.mini-sql > 172.16.59.108.sflow: UDP,
> length 728
> 09:13:00.727097 IP 192.168.181.251.mini-sql > 172.16.59.108.sflow: UDP,
> length 660
> 09:13:02.744447 IP 192.168.181.251.mini-sql > 172.16.59.108.sflow: UDP,
> length 592
> 09:13:04.731880 IP 192.168.181.251.mini-sql > 172.16.59.108.sflow: UDP,
> length 660
> 09:13:06.731605 IP 192.168.181.251.mini-sql > 172.16.59.108.sflow: UDP,
> length 732
>
>
> Hope someone can help me on this.
>
> Tnx,
>
> --Mike
>
>
>
>
> ------------------------------------------------------------------------------
> ThinkGeek and WIRED's GeekDad team up for the Ultimate
> GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the
> lucky parental unit. See the prize list and enter to win:
> http://p.sf.net/sfu/thinkgeek-promo
> _______________________________________________
> Nfsen-discuss mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Darwin)
iQCVAwUBTCcDTf5AbZRALNr/AQJNXwP/eHhKCKXeg0YNTBn1cWaeoi62GxtCN0Dh
kRJCgwXxcmvAlZIL1OiaVMSQpqMogL94MMUVnNnJFnC97bqCyjeCKC69bX/gXa2f
C8DLq6KYcwXV8uKUutIXd5kk8dKPueKVG/hPUn+cT+4wkIFYH01YFy65LICc8Qa+
ALpa3TyHgEQ=
=Q8I2
-----END PGP SIGNATURE-----
------------------------------------------------------------------------------
This SF.net email is sponsored by Sprint
What will you do first with EVO, the first 4G phone?
Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
