Cflowd - Weird Characters

From: alaerte@embratel.com.br
Date: Tue Dec 11 2001 - 10:20:23 PST

  • Next message: Hendrik Visage: "Re: Cflowd - Weird Characters"

    Hi,

    I have had this problem with weird characters in the raw files. I used
    "Flowwatch" and it showed that the flow are being delivered correctly on the
    sparc-solaris-2.6 running Cflowd:

       FLOW
         index: 0xc7ffff
         router: 100.6.128.250
         src IP: 100.2.3.9
         dst IP: 100.6.9.200
         input ifIndex: 2
         output ifIndex: 0
         src port: 138
         dst port: 138
         pkts: 2
         bytes: 484
         IP nexthop: 0.0.0.0
         start time: Tue Dec 11 12:00:35 2001
         end time: Tue Dec 11 12:00:35 2001
         protocol: 17
         tos: 0
         src AS: 0
         dst AS: 0
         src masklen: 8
         dst masklen: 21
         TCP flags: 0x10
         engine type: 0
         engine id: 0

    I got something like that on the raw files:

            more 100.6.128.250.flows.0

              
              
              I
                      i??< <
              
              
                      i??< <
              
              
                      i??< <
              

                      i??< <

    I reinstalled cflowd (cflowd-2-1-b1.tar.gz), arts (arts++-1-1-a8.tar.gz) and
    gmake (make-3.79.1.tar.gz) and it didnt help.

    My cflowd.conf is:

       HOST: 100.6.128.250 # IP address of Cisco sending data.
         ADDRESSES: 10.6.128.250 # Addresses of interfaces on
       Cisco sending data.
         CFDATAPORT: 2055 # Port on which to listen for data.
         SNMPCOMM: 'public' # SNMP community name.
         LOCALAS: 0 # Local AS of Cisco sending
       data.
         COLLECT: { protocol, portmatrix, ifmatrix, nexthop,
       netmatrix,
                                    tos, flows }

    My 6509 MSFC configuration is:

       ip flow-export source Loopback0
       ip flow-export version 5
       ip flow-export destination 10.2.4.93 2055

    I would appreciate any help.

    Thanks

    Alaerte

    --
    cflowd mailing list
    cflowd@caida.org
    



    This archive was generated by hypermail 2b29 : Tue Dec 11 2001 - 09:41:26 PST