[netflow-tools] softflowd non-IP problem

[Damien Miller]

On Tue, 23 Oct 2007, Gijs Molenaar wrote:

> Hello,
> 
> I'm trying to set up a softflowd configuration but I encountered a problem.
> 
> We have 2 identical switches which I configured with port mirroring. Both
> mirroring ports sent all the data to 2 network interfaces on a FreeBSD 6.2
> machine. On the FreeBSD machine I'm running 2 instances of softflowd. 
> 
> Commands:
> /usr/local/sbin/softflowd -i em2 -n 127.0.0.1:8818 -c IDCCORE1.sock

Is it always this softflowd instance that doesn't work? I.e. is it only
packets coming in on em2 that are treated as non-IP?

My first guess is that your switch is giving you VLAN tagged packets on
this interface. I guess you might be able to tell by doing a 
"tcpdump -evvv" on them.

-d