Paolo, Thanks for the feedback... it really helped make sense of this issue.
On Wed, May 25, 2016 at 2:38 AM, Paolo Lucente <[email protected]> wrote: > Hi Bryan, > > This should be easily connected to your plugin_buffer_size and > plugin_pipe_size > settings - they are OK for the amount of v4 traffic, they may be too large > for > the amount of v6 traffic so data is sitting there waiting for big buffers > to be > filled. Having different buffers for v4 and v6 will help. > > Cheers, > Paolo > > On Tue, May 24, 2016 at 01:51:12PM -0500, Bryan Lynn wrote: > > Follow-up: It appears the issue is related to the amount of v6 traffic. > > After increasing the v6 traffic flows the v6 data is populating. > However, > > I can't figure out why this matters. > > > > On Tue, May 24, 2016 at 12:41 PM, Bryan Lynn <[email protected]> wrote: > > > > > I'm having trouble with processing ipv6 sflows. I've confirmed that > both > > > v4 and v6 flows are arriving on port 6343 with the following tcpdump > and > > > sflowtool: > > > > > > tcpdump -p -s 0 -w - udp port 6343 | sflowtool -r - -l > > > > > > I've simplified the config to make debugging easier. The config is as > > > follows: > > > daemonize: false > > > interface: eth0 > > > plugins: print[v4], print[v6] > > > aggregate_filter[v6]: ip6 or (vlan and ip6 ) > > > aggregate_filter[v4]: ip or ( vlan and ip ) > > > aggregate[v6]: dst_net, peer_dst_as, dst_as, dst_mask, out_iface, tag > > > aggregate[v4]: dst_net, peer_dst_as, dst_as, dst_mask, out_iface, tag > > > plugin_pipe_size: 1024000000 > > > plugin_buffer_size: 10240000 > > > > > > print_refresh_time: 60 > > > print_history: 1m > > > print_history_roundoff: m > > > print_output: csv > > > print_output_file_append[v6]: true > > > print_output_file[v6]: /tmp/v6.out > > > print_output_file_append[v4]: true > > > print_output_file[v4]: /tmp/v4.out > > > > > > The v4 data is populating as expected but v6 is not. > > > > > > I've tested with the following versions with the same results: > > > sfacctd -V > > > sFlow Accounting Daemon, sfacctd 1.5.0rc1 (20130829-00) > > > --enable-ipv6 --enable-mysql > > > > > > sfacctd -V > > > sFlow Accounting Daemon, sfacctd 1.6.0-git (20160211-00) > > > --prefix=/usr --sysconfdir=/etc --localstatedir=/var > > > --includedir=/usr/include --enable-64bit --enable-mmap > --enable-v4-mapped > > > --enable-ipv6 --enable-mysql --enable-sqlite3 --enable-geoip > --enable-kafka > > > --enable-jansson --enable-rabbitmq --enable-pgsql > > > --with-pgsql-includes=/usr/include/postgresql --enable-ulog > --enable-plabel > > > > > > Clearly I'm missing or overlooking something. > > > > > > > -- > > The information in this message may be confidential. It is intended > solely > > for > > the addressee(s). If you are not the intended recipient, any disclosure, > > copying or distribution of the message, or any action or omission taken > by > > you > > in reliance on it, is prohibited and may be unlawful. Please immediately > > contact the sender if you have received this message in error. > > > > > _______________________________________________ > > pmacct-discussion mailing list > > http://www.pmacct.net/#mailinglists > > > _______________________________________________ > pmacct-discussion mailing list > http://www.pmacct.net/#mailinglists > -- The information in this message may be confidential. It is intended solely for the addressee(s). If you are not the intended recipient, any disclosure, copying or distribution of the message, or any action or omission taken by you in reliance on it, is prohibited and may be unlawful. Please immediately contact the sender if you have received this message in error.
_______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
