I rolled back to nfdump-1.6.1 and nfsen-1.3.4 and the issue is resolved:
netflow# nfsen start
Starting nfcapd:(life-286-agg)
Run: /usr/local/bin/sfcapd -w -D -p 2058 -u www -g www -B 200000 -S 1 -P
/data/var/nfsen/run/life-286-agg.pid -I life-286-agg -l
/data/var/nfsen/profiles-data/live/life-286-agg
[16849] (MusicAgg)
Run: /usr/local/bin/sfcapd -w -D -p 2056 -u www -g www -B 200000 -S 1 -P
/data/var/nfsen/run/MusicAgg.pid -I MusicAgg -l
/data/var/nfsen/profiles-data/live/MusicAgg
[16852] (TerrillAgg)
Run: /usr/local/bin/sfcapd -w -D -p 2057 -u www -g www -B 200000 -S 1 -P
/data/var/nfsen/run/TerrillAgg.pid -I TerrillAgg -l
/data/var/nfsen/profiles-data/live/TerrillAgg
[16855] (enterasys)
Run: /usr/local/bin/nfcapd -w -D -p 2055 -u www -g www -B 200000 -S 1 -P
/data/var/nfsen/run/enterasys.pid -I enterasys -l
/data/var/nfsen/profiles-data/live/enterasys
[16858] (wooten-150-agg)
Run: /usr/local/bin/sfcapd -w -D -p 2059 -u www -g www -B 200000 -S 1 -P
/data/var/nfsen/run/wooten-150-agg.pid -I wooten-150-agg -l
/data/var/nfsen/profiles-data/live/wooten-150-agg
[16861]
Starting nfsend.
Per all existing documentation:
"Note for sflow users:
sfcapd and nfcapd can be used concurrently to collect netflow and sflow
data at the same time. Generic command line options apply to both
collectors likewise.........."
something is definitely broken in the new release.
Bryan VanDivier
Communications Manager
University of North Texas
Data Communications
From: Vandivier, Bryan [mailto:[email protected]]
Sent: Thursday, September 09, 2010 3:59 PM
To: [email protected]
Subject: [Nfsen-discuss] upgrade to nfdump-1.6.2 and nfsen-1.3.5 breaks
simultaneous sflow and netflow collection
Hi, I'm running nfdump/nfsen on FreeBSD stable 8.0. Just made the upgrade to
nfdump-1.6.2 and nfsen-1.3.5 and now I can no longer collect flows using both
nfcapd and sfcapd.
I receive the following error:
netflow# nfsen start
Starting nfcapd:Can not start different type 'sflow' and 'netflow' on same port!
Can not start different type 'sflow' and 'netflow' on same port!
Can not start different type 'sflow' and 'netflow' on same port!
Can not start different type 'sflow' and 'netflow' on same port!
Can not start different type 'sflow' and 'netflow' on same port!
Here's the section of my configuration that pertains to each source:
%sources = (
'enterasys' => { 'port' => '2055', 'col' => '#0000ff', 'type' =>
'netflow' },
'life-286-agg' => { 'port' => '2058', 'col' => '#ff00ff', 'type'
=> 'sflow' },
'wooten-150-agg' => { 'port' => '2059', 'col' => '#ffcccc',
'type' => 'sflow' },
'MusicAgg' => { 'port' => '2056', 'col' => '#ccffcc', 'type' =>
'sflow' },
'TerrillAgg' => { 'port' => '2057', 'col' => '#ccccff', 'type' =>
'sflow' },
);
As you can see they are all configured to use different ports. I have been
able to successfully collect both netflow and sflow in the past. My above
configuration has been working without issue for months.
I am at a loss as to why this is now broken due to the upgrade. Any advice
would be appreciated.
Bryan VanDivier
Communications Manager
University of North Texas
Data Communications
------------------------------------------------------------------------------
This SF.net Dev2Dev email is sponsored by:
Show off your parallel programming skills.
Enter the Intel(R) Threading Challenge 2010.
http://p.sf.net/sfu/intel-thread-sfd
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
