[netflow-tools] softflowctl expire-all

[Damien Miller]

On Tue, 27 Sep 2005, Robin Breathe wrote:

> Damien,
>
> I actually did some fairly extensive testing earlier, I simply couldn't
> decide how best to report the results.
>
> Running tcpdump shows that there really are far more active flows than
> end up in my flowd logs.

Are you tcpdumping the traffic flows themselves or the flow export 
packets?

To ask an obvious question: are you using any flowd.conf filters that drop 
flows?

> Your help is really appreciated, this was an unexpected surprise drawing
> close to the end of an otherwise successful project :) I was going to
> trawl through the code myself tomorrow, but you already know it; I'd be
> even more delighted if we could nail this bug down together.

I'm setting up a test environment right now. Hopefully this will be fairly 
easy to track down. (famous last words...)

-d