Hi Nik, On Wed, Oct 28, 2009 at 12:47:49PM -0500, Nik Martin wrote:
> If I loosen the aggregation filters up to just dst_host and src_host, > i get only slightly more information over a 5 minute period, like > this: Let's say you remove the filters at all, you see what you expect? If you "loosen" the filter to only src_host/dst_host it will match only non-VLAN tagged traffic to the specified src_host/dst_host (keep in mind, it's all tcpdump-style filters). You expect traffic in VLAN 78 but a 'vlan 78' filter doesn't match: i'm wondering if the switch is encoding VLAN information in the sFlow datagram; having the traces is it something you manage to double-check? Otherwise feel free to send one of them over privately so that i can have a look for you. Cheers, Paolo _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists