[netflow-tools] softflowd non-IP problem
djm at mindrot.org
Wed Oct 24 10:50:11 EST 2007
On Tue, 23 Oct 2007, Gijs Molenaar wrote:
> I'm trying to set up a softflowd configuration but I encountered a problem.
> We have 2 identical switches which I configured with port mirroring. Both
> mirroring ports sent all the data to 2 network interfaces on a FreeBSD 6.2
> machine. On the FreeBSD machine I'm running 2 instances of softflowd.
> /usr/local/sbin/softflowd -i em2 -n 127.0.0.1:8818 -c IDCCORE1.sock
Is it always this softflowd instance that doesn't work? I.e. is it only
packets coming in on em2 that are treated as non-IP?
My first guess is that your switch is giving you VLAN tagged packets on
this interface. I guess you might be able to tell by doing a
"tcpdump -evvv" on them.
More information about the netflow-tools