[pmacct-discussion] sfacctd in_iface out_iface

[Bernd Boom]

Hi everybody,   is use the sflow collector and want to collect sflow data depending on the inteface information which is possible since version 0.12.1.   The importat columns are in_iface and out_iface as you can see in the aggregate part.   --------------------- aggregate: tag,tag2,in_iface, out_iface,flows,tcpflags,vlan,tag,src_host,dst_hos t,src_port,dst_port,proto,src_mac,dst_mac,tos ---------------------   The problem is that i receive this interface information when itake a look at the database.   flowdb=> select  agent_id,iface_in, iface_out from flow_live;  agent_id | iface_in | iface_out ----------+----------+------------         2 |       23 | 2147483648         2 |        0 |         23         1 |        3 |         24         2 |       24 |         23         2 |       23 |         24         2 |       24 |         23         1 |       24 |          3         1 |        0 |          3         2 |        0 |         23         2 |        0 |         23         1 |       24 |          3         1 |       24 |          3         1 |        3 |         24         1 |        0 |          3         2 |       24 |         23         2 |       17 |      65535         3 |       24 |          0         3 |       23 |          0         2 |        0 |         23         1 |        0 |          3         1 |        0 |          3         1 |        0 |          3         1 |        0 |          3         1 |        3 |         24         2 |       24 | 2147483648         1 |        0 |          3         2 |       24 |         23         2 |       23 |         24         1 |       24 |          3         1 |        3 |         24         2 |       23 |         24         2 |       24 |         23         2 |       23 |         24         2 |       24 |         23         1 |        3 |         24         1 |       24 |          3         1 |        3 |         24         2 |       23 |         24         2 |       24 |         23         1 |       24 |          3         1 |        3 |         24         3 |       23 | 1073741823         3 |       23 | 1073741823         1 |       24 | 2147483648         2 |       24 |         23         2 |       23 |         24         1 |        0 |          3         3 |       23 |          0         2 |       24 |         23         1 |       24 |          3         1 |        3 |         24         2 |       23 | 2147483648         2 |       23 |         24         3 |       23 | 1073741823         2 |        0 |         23         2 |        0 |         23         2 |       24 |         23         2 |       23 |         24         1 |       24 |          3         2 |       23 | 2147483648         2 |       24 |         23         2 |       23 | 2147483648         2 |       23 |         24         1 |       24 |          3         1 |       24 |          3         1 |       24 |          3         2 |       24 |         23 The correct interfaces are for example  for agent_id=3    23 and 24.    I compile with --64bit and withourt,  but with same result.   Are there any ideas why the interface information is so "wrong"   Although it is to my infomation not possible that there are in and out interface information in the same  line!   The version 0.12.0 is correct with these foundry switches with pretagging the interface information!   many thanks   Bernd Boom      GRATIS: Movie-Flat mit über 300 Top-Videos. Für WEB.DE Nutzer    dauerhaft kostenlos! Jetzt freischalten unter http://movieflat.web.de

_______________________________________________
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists