Hi everybody,
 
is use the sflow collector and want to collect sflow data depending 
on the inteface information which should be possible since version 0.12.1.
 
The importat columns are in_iface and out_iface as you can see in the
 aggregate part.
 
---------------------
 aggregate: tag,tag2,in_iface, 
out_iface,flows,tcpflags,vlan,tag,src_host,dst_hos
t,src_port,dst_port,proto,src_mac,dst_mac,tos
---------------------
 
The problem is that i receive the following (sometimes wrong) interface 
information, as you can seen from the database output.
 
flowdb=> select  agent_id,iface_in, iface_out from flow_live;
 agent_id
 | iface_in | iface_out
----------+----------+------------
 
 2 |       23 | 2147483648
 2 |        0 |         23
 
 1 |        3 |         24
 2 |       24 |         23
 
 2 |       23 |         24
 2 |       24 |         23
 
 1 |       24 |          3
 1 |        0 |          3
 
 2 |        0 |         23
 2 |        0 |         23
 
 1 |       24 |          3
 1 |       24 |          3
 
 1 |        3 |         24
 1 |        0 |          3
 
 2 |       24 |         23
 2 |       17 |      65535
 
 3 |       24 |          0
 3 |       23 |          0
 
 2 |        0 |         23
 1 |        0 |          3
 
 1 |        0 |          3
 1 |        0 |          3
 
 1 |        0 |          3
 1 |        3 |         24
 
 2 |       24 | 2147483648
 1 |        0 |          3
 
 2 |       24 |         23
 2 |       23 |         24
 
 1 |       24 |          3
 1 |        3 |         24
 
 2 |       23 |         24
 2 |       24 |         23
 
 2 |       23 |         24
 2 |       24 |         23
 
 1 |        3 |         24
 1 |       24 |          3
 
 1 |        3 |         24
 2 |       23 |         24
 
 2 |       24 |         23
 1 |       24 |          3
 
 1 |        3 |         24
 3 |       23 | 1073741823
 
 3 |       23 | 1073741823
 1 |       24 | 2147483648
 
 2 |       24 |         23
 2 |       23 |         24
 
 1 |        0 |          3
 3 |       23 |          0
 
 2 |       24 |         23
 1 |       24 |          3
 
 1 |        3 |         24
 2 |       23 | 2147483648
 
 2 |       23 |         24
 3 |       23 | 1073741823
 
 2 |        0 |         23
 2 |        0 |         23
 
 2 |       24 |         23
 2 |       23 |         24
 
 1 |       24 |          3
 2 |       23 | 2147483648
 
 2 |       24 |         23
 2 |       23 | 2147483648
 
 2 |       23 |         24
 1 |       24 |          3
 
 1 |       24 |          3
 1 |       24 |          3
 
 2 |       24 |         23




The correct interfaces are for example agent_id=3    23 and 24.
 
 I compile with --64bit and without this option,  but with the same result.
 
Are there any ideas why the interface information is sometimes "wrong"
 
Although it is to my infomation not possible that there are in and 
out interface information in the same flow informatione (mostly the switches 
only support only (in-flowaccounting) as this switches!
 
The version 0.12.0 works correct with these foundry switches with 
pretagging the interface information!
 
many thanks
 
Bernd Boom
___________________________________________________________
GRATIS: Movie-Flat mit über 300 Top-Videos. Für WEB.DE Nutzer
dauerhaft kostenlos! Jetzt freischalten unter http://movieflat.web.de

_______________________________________________
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists

Reply via email to