Hi list, this is a fresh installation of nfsen 1.3.5 (and nfdump 1.6.1-1) on Debian squeeze on a IPv6-only host (or so I planned), and
softflowd 0.9.8-3 on another squeeze host. Flow information is being collected (as softflowctl statistics shows). On the monitored host, my /etc/default/softflowd reads: OPTIONS="-t expint=30 -v 9 -n [a:b:c:d::2000:1001]:9980 resulting in a fine UDP connection that can be verified with netstat -uan on both hosts. However, the nfcap files contain no flows. -rw-r--r-- 1 www-data www-data 276 Nov 4 09:05 nfcapd.201111040900 -rw-r--r-- 1 www-data www-data 276 Nov 4 09:10 nfcapd.201111040905 -rw-r--r-- 1 www-data www-data 276 Nov 4 09:15 nfcapd.201111040910 On the other hand, if I switch to collecting via ipv4, as in /etc/default/softflowd: OPTIONS="-t expint=30 -v 9 -n 10.10.20.1:9980" everything is fine and good and well. Now, the man page for nfcapd lists certain options regarding listening on IPv4 or IPv6 udp connections. So, I believe I should simply add a "-6" to the command line. I suppose that should be done in nfsen/etc/nfsen.conf but I cannot find the right place. Where can I define further options to nfcapd ? Thanks in advance, Erwin -- +-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Erwin Rennert, IT Services Center for Social Innovation A-1150 Wien, Linke Wienzeile 246 Austria, Europe Phone: ++43-1-495 04 42 - 61 Facsimile: ++43-1-495 04 42 - 40 http://www.zsi.at/ ------------------------------------------------------------------------------ RSA(R) Conference 2012 Save $700 by Nov 18 Register now http://p.sf.net/sfu/rsa-sfdev2dev1 _______________________________________________ Nfsen-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
