[netflow-tools] softflowd non-IP problem

Damien Miller djm at mindrot.org
Wed Oct 24 10:50:11 EST 2007

On Tue, 23 Oct 2007, Gijs Molenaar wrote:

> Hello,
> I'm trying to set up a softflowd configuration but I encountered a problem.
> We have 2 identical switches which I configured with port mirroring. Both
> mirroring ports sent all the data to 2 network interfaces on a FreeBSD 6.2
> machine. On the FreeBSD machine I'm running 2 instances of softflowd. 
> Commands:
> /usr/local/sbin/softflowd -i em2 -n -c IDCCORE1.sock

Is it always this softflowd instance that doesn't work? I.e. is it only
packets coming in on em2 that are treated as non-IP?

My first guess is that your switch is giving you VLAN tagged packets on
this interface. I guess you might be able to tell by doing a 
"tcpdump -evvv" on them.


More information about the netflow-tools mailing list