From brian at logixresourcegroup.com  Fri Feb 29 03:12:00 2008
From: brian at logixresourcegroup.com (Brian White)
Date: Thu, 28 Feb 2008 11:12:00 -0500
Subject: [netflow-tools] Flow header information
Message-ID: <056d01c87a24$a6965320$95d9a8c0@brian>


Hi,

I've been having trouble getting the header information out of the Netflow 
packets using the FLOW_ENGINE_INFO values.  My flowd.conf has "Store ALL", 
so it should be keeping everything sent...  I've tried "Store 
FLOW_ENGINE_INFO" being specifically stated, as well.  Regardless of what I 
use, I cannot get any of the related information out of the stored file.

Using "flowd-reader -v [file]", I get pretty much everything except the 
flow_sequence, engine_type, engine_id, and source_id.  I've also tried using 
the Flowd perl module to reference the data manually using 
$flow->{flow_sequence} etc, but it's null.

Any ideas?  What I'm trying to accomplish is getting the flow sequence 
numbers to determine how many flows are being sent to my collector vs. how 
many I have actually received.  This way I can determine if there are issues 
in the network that's causing data loss in the flow reports.

Thanks,

Brian