Re: if_bridge and ng_netflow

2013-08-12 Thread Volodymyr Kostyrko

10.08.2013 16:51, Fbsd8 wrote:

if_bridge is relatively new in FreeBSD. Netgraph precedes if_bridge and
is un-aware of if_bridge. Change your if_bridge definition to a
ng bridge definition and everything your trying to do should fall into
place.


ng_bridge lacks some if_bridge goodies like passing by traffic filtering 
and stp. However yes, ng_bridge works for me and I can compose a good 
bridge and even record netflow without data duplication.


--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: if_bridge and ng_netflow

2013-08-10 Thread Fbsd8

Volodymyr Kostyrko wrote:

Hi all.

I have one machine with bridge configured. Recently I thinked about 
capturing all traffic on the bridge with ng_netflow.


1. ng_ether doesn't attach to bridge0 interface:

# ngctl list | grep ether
  Name: rl0 Type: ether   ID: 0034   Num hooks: 2
  Name: ste0Type: ether   ID: 0035   Num hooks: 2
  Name: wlan0   Type: ether   ID: 0036   Num hooks: 2

2. If I attach all physical interfaces to netflow I get no statistics 
for data originating from server. I.e. I see all inbound traffic but I 
see no outbound traffic.


Maybe I'm just doing everything wrong? I'm adding interfaces to netflow 
this way:


connect wlan0: netflow0: upper iface2
connect wlan0: netflow0: lower iface3
connect netflow0: netflow0: out2 out3

3. Ok, I can do this other way (sorry, I'm bad at netflow scripting):

mkpeer eiface ether ether
rmhook ngeth0: ether

ifconfig ngeth0 up
ifconfig bridge0 span ngeth0

And again I see only inbound packets. I see no packets coming from me.

Is there any other working way to get stats from bridge interface?




if_bridge is relatively new in FreeBSD. Netgraph precedes if_bridge and 
is un-aware of if_bridge. Change your if_bridge definition to a
ng bridge definition and everything your trying to do should fall into 
place.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


if_bridge and ng_netflow

2013-08-09 Thread Volodymyr Kostyrko

Hi all.

I have one machine with bridge configured. Recently I thinked about 
capturing all traffic on the bridge with ng_netflow.


1. ng_ether doesn't attach to bridge0 interface:

# ngctl list | grep ether
  Name: rl0 Type: ether   ID: 0034   Num hooks: 2
  Name: ste0Type: ether   ID: 0035   Num hooks: 2
  Name: wlan0   Type: ether   ID: 0036   Num hooks: 2

2. If I attach all physical interfaces to netflow I get no statistics 
for data originating from server. I.e. I see all inbound traffic but I 
see no outbound traffic.


Maybe I'm just doing everything wrong? I'm adding interfaces to netflow 
this way:


connect wlan0: netflow0: upper iface2
connect wlan0: netflow0: lower iface3
connect netflow0: netflow0: out2 out3

3. Ok, I can do this other way (sorry, I'm bad at netflow scripting):

mkpeer eiface ether ether
rmhook ngeth0: ether

ifconfig ngeth0 up
ifconfig bridge0 span ngeth0

And again I see only inbound packets. I see no packets coming from me.

Is there any other working way to get stats from bridge interface?

--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"