Finally I commited my lines (I will post them at the end) but system is
not working.
What I can see so far is.
Juniper mx960 is using ipfix (netflow version 10) to export flows.
nfcapd in debug mode is not able to decode the packets (nothing appeared
on the screen).
packet capture analized with wireshark shows that the packet are
arriving into the server properly, also decoded as cflow I can see some
info on them.
btw; I will try to get version9 working , but so far I only get some
messages about "version9 does not support in-line sampling".
Any ideas about it would be preciated.
Regards,
Leandro.
Now: My lines:
[edit chassis]
+ fpc 0 {
+ sampling-instance PEERING;
+ }
[edit interfaces xe-0/2/0 unit 0 family inet filter]
- input port-mirror;
+ input SAMPLE-ALL;
- output port-mirror;
+ output SAMPLE-ALL;
[edit forwarding-options]
+ sampling {
+ instance {
+ PEERING {
+ input {
+ rate 1;
+ }
+ family inet {
+ output {
+ flow-server 10.0.0.2 {
+ port 9995;
+ version-ipfix {
+ template {
+ TEMPLATEv4;
+ }
+ }
+ }
+ inline-jflow {
+ source-address 10.0.0.1;
+ }
+ }
+ }
+ }
+ }
+ }
[edit firewall family inet]
filter cpe_block { ... }
+ filter SAMPLE-ALL {
+ term 1 {
+ then sample;
+ }
+ term ALLOW-ALL {
+ then accept;
+ }
+ }
[edit services]
+ flow-monitoring {
+ version-ipfix {
+ template TEMPLATEv4 {
+ flow-active-timeout 150;
+ flow-inactive-timeout 100;
+ template-refresh-rate {
+ seconds 10;
+ }
+ option-refresh-rate {
+ seconds 10;
+ }
+ ipv4-template;
+ }
+ }
+ }
On 25/11/15 15:37, Saverio Proto wrote:
> Hello,
>
> I am pretty sure I sent you what you are asking for few days ago.
> Did you have problems with my configuration ?
>
> If you have a MX960 you probably also have support from JTAC. It is
> worthed to open a case with JTAC if your configuration is not working.
>
> Saverio
>
>
> 2015-11-24 18:33 GMT+01:00 Leandro <[email protected]>:
>> Hello , guys , anyone can share a working config to get the mx960 router
>> working togheter with nfsen collector?
>>
>> Regards,
>> Leandro.
>>
>>
>> ------------------------------------------------------------------------------
>> Go from Idea to Many App Stores Faster with Intel(R) XDK
>> Give your users amazing mobile app experiences with Intel(R) XDK.
>> Use one codebase in this all-in-one HTML5 development environment.
>> Design, debug & build mobile apps & 2D/3D high-impact games for multiple OSs.
>> http://pubads.g.doubleclick.net/gampad/clk?id=254741551&iu=/4140
>> _______________________________________________
>> Nfsen-discuss mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
------------------------------------------------------------------------------
Go from Idea to Many App Stores Faster with Intel(R) XDK
Give your users amazing mobile app experiences with Intel(R) XDK.
Use one codebase in this all-in-one HTML5 development environment.
Design, debug & build mobile apps & 2D/3D high-impact games for multiple OSs.
http://pubads.g.doubleclick.net/gampad/clk?id=254741551&iu=/4140
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
