Hi Loic, Can you share a brief trace of your IPFIX packets so to frame better the issue? If yes, we may consider following this up privately.
Cheers, Paolo On Fri, Aug 21, 2015 at 09:26:41AM +0200, Loïc Rousselot wrote: > Hi, > > as somebody hit this ? > > nfacctd log flawlessly (src+dst ip, src+dst port) without the bulk > allocation but is unable to parse correctly the range port attributed. > > >From the Cisco documentation it looks like: > > postNAPTSourceTransportPort IANA IPFIX ID is 227 > sourceTransportPort IANA IPFIX ID is 7 > > Ref: > http://www.cisco.com/c/en/us/td/docs/routers/asr9000/software/asr9k_r5-2/cg-nat/configuration/guide/b_cgnat_cg52xasr9k/b_cgnat_cg52xasr9k_chapter_0100.html > > With bulk allocation a range is selected and reserved for the client and > only one line is sent with netflow, further accesses within the range are > not logged, dramatically reducing the logging space used. > > Thank in advance > > Loïc > _______________________________________________ > pmacct-discussion mailing list > http://www.pmacct.net/#mailinglists _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
