[netflow-tools] flowd0.9

Fri Dec 3 23:49:52 EST 2010

Hello

I am testing currently the flowd, 

When I run the ./flowd -d I got the below messages:

Any idea what could be behind this issue?

output_flow_flush: flushing output queue len 0

packet from unauthorised agent 192.168.250.86

Received max number of packets (512) on fd 5

output_flow_flush: flushing output queue len 0

packet from unauthorised agent 192.168.250.86

Received max number of packets (512) on fd 5

output_flow_flush: flushing output queue len 0

packet from unauthorised agent 192.168.250.86

Received max number of packets (512) on fd 5

output_flow_flush: flushing output queue len 0

packet from unauthorised agent 192.168.250.86

Received max number of packets (512) on fd 5

output_flow_flush: flushing output queue len 0

packet from unauthorised agent 192.168.250.86

Received max number of packets (512) on fd 5

output_flow_flush: flushing output queue len 0

packet from unauthorised agent 192.168.250.86

Received max number of packets (512) on fd 5

output_flow_flush: flushing output queue len 0

packet from unauthorised agent 192.168.250.86

Received max number of packets (512) on fd 5

output_flow_flush: flushing output queue len 0

packet from unauthorised agent 192.168.250.86

Received max number of packets (512) on fd 5

output_flow_flush: flushing output queue len 0

packet from unauthorised agent 192.168.250.86

Received max number of packets (512) on fd 5

output_flow_flush: flushing output queue len 0

packet from unauthorised agent 192.168.250.86

Received max number of packets (512) on fd 5

output_flow_flush: flushing output queue len 0

packet from unauthorised agent 192.168.250.86

Received max number of packets (512) on fd 5

output_flow_flush: flushing output queue len 0

packet from unauthorised agent 192.168.250.86

Received max number of packets (512) on fd 5

output_flow_flush: flushing output queue len 0

packet from unauthorised agent 192.168.250.86

Received max number of packets (512) on fd 5

output_flow_flush: flushing output queue len 0

packet from unauthorised agent 192.168.250.86

Check the flowd.conf file

We already added this IP as flow-source

# Specify where flowd should store its flow records

logfile "/var/log/flowd"

# Specify what addresses/ports flowd should listen on.

# Multiple addresses may be specified

#listen on 127.0.0.1:123456

listen on 192.168.251.66:9996

#listen on [::]:12345

#listen on 0.0.0.0:12345

#listen on [::]:12345

# Select which hosts we trust to send us flows (leave blank to trust any)

# May be specified multiple times to allow more than one host/network

#flow source 192.168.251.247

flow source 192.168.250.86

#flow source 127.0.0.1

#flow source 10.0.0.0/8

# Specify multicast groups to join (default: none)

# IPv6 addresses may be specified with or without interface scope

#join group 224.0.1.20

#join group ff02::114%em0

# Specify which flow records are recorded in the log. Multiple options may
be 

# specified.

store ALL

#store PROTO_FLAGS_TOS

#store AGENT_ADDR

#store SRC_ADDR

#store DST_ADDR

#store SRCDST_PORT

#store PACKETS

#store OCTETS

#store CRC32

# Flow filtering rules

discard all

accept agent 127.0.0.1

accept agent 192.168.250.86

cid:image001.gif at 01C9BEB7.7B6F15A0

cid:image002.jpg at 01C9BEB7.7B6F15A0

Eliane M. Rameh
Network and Security Engineer
e-mail:eliane.rameh at idm.net.lb

cid:image002.jpg at 01C9BEB7.7B6F15A0

Jisr Al Bacha P.O. Box 11-316 Beirut Lebanon
tel +961 1 512513 ext. 335| fax +961 1 489389
tech support 1282 | www.idm.net.lb

cid:image003.gif at 01C9BEB7.7B6F15A0
cid:image004.gif at 01C9BEB7.7B6F15A0

PLEASE CONSIDER THE ENVIRONMENT BEFORE YOU PRINT THIS E-MAIL
Confidentiality Notice: The information in this document and attachments is
confidential and may also be legally privileged. It is intended only for the
use of the named recipient. Internet communications are not secure and
therefore IDM does not accept legal responsibility for the contents of this
message. If you are not the intended recipient, please notify us immediately
and then delete this document. Do not disclose the contents of this document
to any other person, nor take any copies. Violation of this notice may be
unlawful.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mindrot.org/pipermail/netflow-tools/attachments/20101203/a6abb45b/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.gif
Type: image/gif
Size: 1077 bytes
Desc: not available
URL: <http://lists.mindrot.org/pipermail/netflow-tools/attachments/20101203/a6abb45b/attachment-0003.gif>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.jpg
Type: image/jpeg
Size: 696 bytes
Desc: not available
URL: <http://lists.mindrot.org/pipermail/netflow-tools/attachments/20101203/a6abb45b/attachment-0002.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.jpg
Type: image/jpeg
Size: 2646 bytes
Desc: not available
URL: <http://lists.mindrot.org/pipermail/netflow-tools/attachments/20101203/a6abb45b/attachment-0003.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image004.gif
Type: image/gif
Size: 975 bytes
Desc: not available
URL: <http://lists.mindrot.org/pipermail/netflow-tools/attachments/20101203/a6abb45b/attachment-0004.gif>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image005.gif
Type: image/gif
Size: 762 bytes
Desc: not available
URL: <http://lists.mindrot.org/pipermail/netflow-tools/attachments/20101203/a6abb45b/attachment-0005.gif>