Follow-up: It appears the issue is related to the amount of v6 traffic. After increasing the v6 traffic flows the v6 data is populating. However, I can't figure out why this matters.
On Tue, May 24, 2016 at 12:41 PM, Bryan Lynn <[email protected]> wrote: > I'm having trouble with processing ipv6 sflows. I've confirmed that both > v4 and v6 flows are arriving on port 6343 with the following tcpdump and > sflowtool: > > tcpdump -p -s 0 -w - udp port 6343 | sflowtool -r - -l > > I've simplified the config to make debugging easier. The config is as > follows: > daemonize: false > interface: eth0 > plugins: print[v4], print[v6] > aggregate_filter[v6]: ip6 or (vlan and ip6 ) > aggregate_filter[v4]: ip or ( vlan and ip ) > aggregate[v6]: dst_net, peer_dst_as, dst_as, dst_mask, out_iface, tag > aggregate[v4]: dst_net, peer_dst_as, dst_as, dst_mask, out_iface, tag > plugin_pipe_size: 1024000000 > plugin_buffer_size: 10240000 > > print_refresh_time: 60 > print_history: 1m > print_history_roundoff: m > print_output: csv > print_output_file_append[v6]: true > print_output_file[v6]: /tmp/v6.out > print_output_file_append[v4]: true > print_output_file[v4]: /tmp/v4.out > > The v4 data is populating as expected but v6 is not. > > I've tested with the following versions with the same results: > sfacctd -V > sFlow Accounting Daemon, sfacctd 1.5.0rc1 (20130829-00) > --enable-ipv6 --enable-mysql > > sfacctd -V > sFlow Accounting Daemon, sfacctd 1.6.0-git (20160211-00) > --prefix=/usr --sysconfdir=/etc --localstatedir=/var > --includedir=/usr/include --enable-64bit --enable-mmap --enable-v4-mapped > --enable-ipv6 --enable-mysql --enable-sqlite3 --enable-geoip --enable-kafka > --enable-jansson --enable-rabbitmq --enable-pgsql > --with-pgsql-includes=/usr/include/postgresql --enable-ulog --enable-plabel > > Clearly I'm missing or overlooking something. > -- The information in this message may be confidential. It is intended solely for the addressee(s). If you are not the intended recipient, any disclosure, copying or distribution of the message, or any action or omission taken by you in reliance on it, is prohibited and may be unlawful. Please immediately contact the sender if you have received this message in error.
_______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
