Hello Erwin,
In your %sources hash you can add 'optarg' for each source and list any
special command line parameters. Here's an example for setting a fixed
sampling rate:
'76xx_lab' => { 'port' => '9902', 'col' => '#000000', 'type' =>
'netflow', 'optarg' => '-s -1' },
Regards,
Adrian
On Fri, Nov 4, 2011 at 1:08 PM, Erwin Rennert <[email protected]> wrote:
> Hi list,
>
> this is a fresh installation of nfsen 1.3.5 (and nfdump 1.6.1-1) on
> Debian squeeze on a IPv6-only host (or so I planned), and
>
> softflowd 0.9.8-3 on another squeeze host.
>
> Flow information is being collected (as softflowctl statistics shows).
>
> On the monitored host, my /etc/default/softflowd reads:
> OPTIONS="-t expint=30 -v 9 -n [a:b:c:d::2000:1001]:9980
>
> resulting in a fine UDP connection that can be verified with netstat
> -uan on both hosts. However, the nfcap files contain no flows.
>
> -rw-r--r-- 1 www-data www-data 276 Nov 4 09:05 nfcapd.201111040900
> -rw-r--r-- 1 www-data www-data 276 Nov 4 09:10 nfcapd.201111040905
> -rw-r--r-- 1 www-data www-data 276 Nov 4 09:15 nfcapd.201111040910
>
> On the other hand, if I switch to collecting via ipv4, as in
> /etc/default/softflowd:
> OPTIONS="-t expint=30 -v 9 -n 10.10.20.1:9980"
>
> everything is fine and good and well.
>
> Now, the man page for nfcapd lists certain options regarding listening
> on IPv4 or IPv6 udp connections. So, I believe I should simply add a
> "-6" to the command line. I suppose that should be done in
> nfsen/etc/nfsen.conf but I cannot find the right place.
>
> Where can I define further options to nfcapd ?
>
> Thanks in advance,
> Erwin
>
> --
> +-+-+-+-+-+-+-+-+-+-+-+-+-+-+
> Erwin Rennert, IT Services
> Center for Social Innovation
>
> A-1150 Wien, Linke Wienzeile 246
> Austria, Europe
>
> Phone: ++43-1-495 04 42 - 61
> Facsimile: ++43-1-495 04 42 - 40
> http://www.zsi.at/
>
>
>
> ------------------------------------------------------------------------------
> RSA(R) Conference 2012
> Save $700 by Nov 18
> Register now
> http://p.sf.net/sfu/rsa-sfdev2dev1
> _______________________________________________
> Nfsen-discuss mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
>
------------------------------------------------------------------------------
RSA(R) Conference 2012
Save $700 by Nov 18
Register now
http://p.sf.net/sfu/rsa-sfdev2dev1
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
