carsten.schoene at internetx
Nov 9, 2010, 2:40 AM
Post #1 of 1
(305 views)
Permalink
|
|
Strange byte & packet results with nprobe 6.0.2
|
|
Hello List,
i'm getting strange byte & packet results using nprobe 6.0.2
with netflow v9 , with v5 there is no problem.
I updated pf_ring and nprobe to current versions, before this
started. I'm not sure it's really an nprobe problem or pf_ring...
# netflow v5 data stream
Nov 9 11:10:00 flow nfcapd[13776]: Ident: 'eth4' Flows: 1255242, Packets: 10102262, Bytes:
8623983483, Sequence Errors: 0, Bad Packets: 0
# netflow v9 data stream
Nov 9 11:10:00 flow nfcapd[13773]: Ident: 'test' Flows: 1257845, Packets: 52315913127, Bytes:
38583222496, Sequence Errors: 14, Bad Packets: 0
Packet & Byte counts are to high for the v9 data stream.
i use the following commands for the nprobe captures:
# v5
nprobe -s 1 -l 1 -t 60 -q <source-ip>:0 -n <target-ip>:4442 -V 5 -i eth4 -u 4 -Q 4
# v9 (with default template)
nprobe -s 1 -l 1 -t 60 -q <source-ip>:0 -n <target-ip>:4443 -V 9 -i eth4 -u 4 -Q 4
Any help or idea would be great.
Regards,
--
Carsten Schöne
Leiter Rechenzentrum
InterNetX GmbH
Maximilianstr. 6
93047 Regensburg
Tel. +49 941 59559-480
Fax +49 941 59579-051
www.internetx.com
www.facebook.com/InterNetX
www.twitter.com/InterNetX
Geschäftsführer/CEO: Thomas Mörz
Amtsgericht Regensburg, HRB 7142
_______________________________________________
Ntop-misc mailing list
Ntop-misc [at] listgateway
http://listgateway.unipi.it/mailman/listinfo/ntop-misc
|
