[netflow-tools] Softflowd not recognizing interface index
djm at mindrot.org
Mon May 23 13:11:13 EST 2005
Jason Dixon wrote:
> I've dropped pfflowd to try out softflowd as it appears to be a bit more
> "compliant" than the pfflowd exports. However, I notice that my flows
> still don't seem to be reporting the correct index numbers for the
> interfaces. I'm not very SNMP savvy, so perhaps it's my own
> inexperience showing. Can someone please explain to me why the
> following output all have 0 as the if_index_in and if_index_out for all
> A good example is seen on lines 1-2 and 8-9. Each pair represents the
> same SSH session but they appear to come from different softflowd agents
> (first from the external interface, then the internal). Regardless,
> they all report an if_index_* of 0, no matter the direction or agent.
Yes, softflowd doesn't get enough information from bpf to fill these in.
If you can figure out a way to get interface names of indices out of
libpcap I can fix it easily.
More information about the netflow-tools