dialp at ucar
Aug 24, 2012, 11:11 AM
Post #3 of 3
(288 views)
Permalink
|
|
Re: nprobe as proxy; IPFIX to v5 conversion loses nexthop info
[In reply to]
|
|
Bug has been filed. For planning purposes, do you have an estimate as
to when this bug might be corrected? Thanks again for your help.
paul
On 8/20/2012 2:23 PM, Luca Deri wrote:
> We'll fix it Paul, please file a bug on http://bugzilla.ntop.org
>
> Luca
>
> On Aug 20, 2012, at 9:30 PM, paul dial <dialp [at] ucar> wrote:
>
>> Hi,
>>
>> I'm running nprobe v.6.9.8 ($Revision: 2461 $) for
>> x86_64-unknown-linux-gnu as:
>>
>> /usr/local/bin/nprobe -3 9994 -n udp://192.x.x.x:9996 -V 5 --syslog
>> nprobe --verbose 2 --pid-file /var/run/nprobe.pid
>>
>> to convert from IPFIX exported from a Juniper MX480 running JUNOS
>> 12.1R1.9, to netflow version 5. A tcpdump of IPFIX flow data coming
>> from the Juniper (before it hits nprobe) shows that the Nexthop field is
>> populated. Taking a tcpdump of packets exiting nprobe as netflow
>> version 5 packets shows that the Nexthop field is always 0.0.0.0. Am I
>> missing a configuration parameter??? This seems like it should directly
>> transfer from IPFIX to v5.
>>
>> Thanks,
>>
>> paul
>>
>> _______________________________________________
>> Ntop-misc mailing list
>> Ntop-misc [at] listgateway
>> http://listgateway.unipi.it/mailman/listinfo/ntop-misc
> _______________________________________________
> Ntop-misc mailing list
> Ntop-misc [at] listgateway
> http://listgateway.unipi.it/mailman/listinfo/ntop-misc
--
----
Paul Dial
Network Engineer
National Center for Atmospheric Research
303-497-1261
dialp [at] ucar
_______________________________________________
Ntop-misc mailing list
Ntop-misc [at] listgateway
http://listgateway.unipi.it/mailman/listinfo/ntop-misc
|
