Hi Paolo, On 12.11.2007 16:58 Paolo Lucente wrote
> Hi Arnold, > > i know it's pretty trivial question but it's worth asking - did you > check the sFlow stream is landing on the same port where the sfacctd > daemon is listening? > by default the switch is sending to port 6343. And so does the collector listen to. > Also, please remember pmacct doesn't support sFlow counter samples, > which just give out interface counters, but only flow samples, which > give out sampled packets. > Maybe I have to re-read the switch documentation and to check what is really sent. > A last note: why don't you upgrade to something fresher? The 0.10.1 > version is quite outdated now. > Because "aptitude install pmacct" is much faster than rolling an own. Best regards, Arnold > Cheers, > Paolo > > On Fri, Nov 09, 2007 at 10:09:44PM +0100, Arnold Nipper wrote: >> I've pmacct 0.10.1-1 as a package running on Debian etch 2.6.18-5-686. >> From tshark I'm seeing that the switch is sending sFlow data, but the >> sFlow collector sfacctd does not show any data. >> >> sfacctd is started as >> >> sfacctd -c src_mac,dst_mac -L 192.168.x.x -D -P memory >> >> tshark data look like >> >> collector1:~# tshark -t ad -n -R "ip.src eq 192.168.y.y" >> Capturing on eth0 >> 2007-11-09 22:06:10.661517 192.168.y.y -> 192.168.x.x sFlow V5, agent >> 192.168.y.y, sub-agent ID 0, seq 1574, 1 samples >> 2007-11-09 22:06:30.651305 192.168.y.y -> 192.168.x.x sFlow V5, agent >> 192.168.y.y, sub-agent ID 0, seq 1575, 1 samples >> >> But >> >> collector1:~# pmacct -s >> SRC_MAC DST_MAC PACKETS BYTES >> >> For a total of: 0 entries >> >> >> >> Any ideas what's going wrong? >> >> >> Best regards, >> Arnold >> -- >> Arnold Nipper, AN45 > > > _______________________________________________ > pmacct-discussion mailing list > http://www.pmacct.net/#mailinglists -- Arnold Nipper / nIPper consulting, Sandhausen, Germany email: [EMAIL PROTECTED] phone: +49 6224 9259 299 mobile: +49 172 2650958 fax: +49 6224 9259 333
signature.asc
Description: OpenPGP digital signature
_______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
