Hi Arnold, i know it's pretty trivial question but it's worth asking - did you check the sFlow stream is landing on the same port where the sfacctd daemon is listening?
Also, please remember pmacct doesn't support sFlow counter samples, which just give out interface counters, but only flow samples, which give out sampled packets. A last note: why don't you upgrade to something fresher? The 0.10.1 version is quite outdated now. Cheers, Paolo On Fri, Nov 09, 2007 at 10:09:44PM +0100, Arnold Nipper wrote: > I've pmacct 0.10.1-1 as a package running on Debian etch 2.6.18-5-686. > From tshark I'm seeing that the switch is sending sFlow data, but the > sFlow collector sfacctd does not show any data. > > sfacctd is started as > > sfacctd -c src_mac,dst_mac -L 192.168.x.x -D -P memory > > tshark data look like > > collector1:~# tshark -t ad -n -R "ip.src eq 192.168.y.y" > Capturing on eth0 > 2007-11-09 22:06:10.661517 192.168.y.y -> 192.168.x.x sFlow V5, agent > 192.168.y.y, sub-agent ID 0, seq 1574, 1 samples > 2007-11-09 22:06:30.651305 192.168.y.y -> 192.168.x.x sFlow V5, agent > 192.168.y.y, sub-agent ID 0, seq 1575, 1 samples > > But > > collector1:~# pmacct -s > SRC_MAC DST_MAC PACKETS BYTES > > For a total of: 0 entries > > > > Any ideas what's going wrong? > > > Best regards, > Arnold > -- > Arnold Nipper, AN45 _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
