Hi there! Please assist in resolve following problem:
I've users network which using internet via openbsd gateway with configured pptp and pflow Scheme: INTERNET <-> | PPTPD + PFLOW OpenBSD gw| <-> |Clients network| pflow interface configured for sending netflow packets to another system with billing software. Problem in next: pflow does not send any netflow packets until user connection not have state TIME_WAIT:TIME_WAIT Example: 1. User starts to download a big file: all tcp x.x.x.x:80 <- 192.168.1.44:60185 ESTABLISHED:ESTABLISHED [223863667 + 422200] wscale 7 [1510002866 + 6912] wscale 6 age 00:01:04, expires in 24:00:00, 6446:10723 pkts, 360634:15916141 bytes, rule 3, pflow 2. After downloading of file: all tcp x.x.x.x:80 <- 192.168.1.44:60185 TIME_WAIT:TIME_WAIT [230697591 + 376248] wscale 7 [1510002867 + 6912] wscale 6 age 00:01:39, expires in 00:01:24, 9234:15482 pkts, 513222:22997533 bytes, rule 3, pflow Only after action 2 pflow will send netflow packet to billing. It's possible to send netflow independ of connection state? Why 'expires' value = 24:00:00 while connection state is ESTABLISHED:ESTABLISHED? Thanks a lot. Sorry for english.
