Hi, we have a working nfsen/nfdump solution. All it's ok and working fine (thanks guys !) until nfsen is receiving netflow data from unkown sources. At that specific moment, the log is filled with:
Apr 11 08:58:59 nf-central nfcapd[19005]: Unknown flow source: '1.1.1.1' Apr 11 08:58:59 nf-central nfcapd[19005]: Skip UDP packet. Ignored packets so far 6256 packets Apr 11 08:58:59 nf-central nfcapd[19005]: Unknown flow source: '1.1.1.1' Apr 11 08:58:59 nf-central nfcapd[19005]: Skip UDP packet. Ignored packets so far 6257 packets Apr 11 08:58:59 nf-central nfcapd[19005]: Unknown flow source: '1.1.1.1' Apr 11 08:58:59 nf-central nfcapd[19005]: Skip UDP packet. Ignored packets so far 6258 packets Apr 11 08:58:59 nf-central nfcapd[19005]: Unknown flow source: '1.1.1.1' Apr 11 08:58:59 nf-central nfcapd[19005]: Skip UDP packet. Ignored packets so far 6259 packets From that time, the netflow data sent by routers trough nfsen is not saved on disk any more. Did you found this before ? It's a bug ? -- ===================================== Manuel SUBREDU Network Engineer at AARNIEC/RoEduNet RoCSIRT Coordinator mobile: +40 (758) 808 052 phone: +40 (232) 201 007 fax: +40 (232) 201 200 e-mail: [email protected] =====================================
smime.p7s
Description: S/MIME Cryptographic Signature
------------------------------------------------------------------------------ Xperia(TM) PLAY It's a major breakthrough. An authentic gaming smartphone on the nation's most reliable network. And it wants your games. http://p.sf.net/sfu/verizon-sfdev
_______________________________________________ Nfsen-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
