I ran a flow-capture deamon on port 2100 and have send UDP packets to that
port using flow-send. The src_as/dst_as fields are not lost.
networks_file has no AS numbers and each line(out of 126) is of the
following format.
128.196.XXX.XXX/XX
I will send you a file saved by flow-capture privately. Thanks for you
help.
Prakash.
On Thu, 23 Feb 2006, Paolo Lucente wrote:
Hello Prakash,
can i ask you to verify that flow-send is actually filling the src_as/dst_as
fields of the NetFlow packets ? If this is the case, can you please send me
privately a chunk of your savefile as i can replay it and investigate the
trouble ?
Howvever, I see in your configuration you use the 'networks_file' directive.
Maybe you have AS numbers in such map and not in the NetFlow packet. If this
is the case, you need to add the 'nfacctd_as_new: true' line as it makes
nfacctd to generate new AS numbers as specified into the supplied networks
map.
Let me know !
Cheers,
Paolo
--
Prakash Rudraraju Systems Programmer
520 626-1225 (W) CCIT - NTS
520 307-0949 (C) University of Arizona
"I define UNIX as 30 definitions of regular expressions living under one roof."
Donald Knuth
-------------------------------------
Printed using 100% recycled electrons
