From owner-freebsd-net@FreeBSD.ORG  Mon Jun 11 16:55:50 2012
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 829D1106564A;
	Mon, 11 Jun 2012 16:55:50 +0000 (UTC)
	(envelope-from bkolasinski@anl.gov)
Received: from lemmy.anl.gov (lemmy.anl.gov [146.137.14.2])
	by mx1.freebsd.org (Postfix) with ESMTP id 4CB518FC14;
	Mon, 11 Jun 2012 16:55:50 +0000 (UTC)
Received: from HETFIELD.anl.gov ([146.137.14.7]) by lemmy.anl.gov
	([146.137.14.2]) with mapi; Mon, 11 Jun 2012 11:55:44 -0500
From: "Kolasinski, Brent D." <bkolasinski@anl.gov>
To: "Alexander V. Chernikov" <melifaro@FreeBSD.org>
Date: Mon, 11 Jun 2012 11:55:59 -0500
Thread-Topic: Netgraph and Netflow-v9
Thread-Index: Ac1H8wonw6ngEmCbS1uFXahEzAjKcw==
Message-ID: <CBFB8BDA.5E15%bkolasinski@anl.gov>
In-Reply-To: <4FD31F0A.5090306@FreeBSD.org>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/14.2.2.120421
acceptlanguage: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Cc: "freebsd-net@freebsd.org" <freebsd-net@freebsd.org>
Subject: Re: Netgraph and Netflow-v9
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 11 Jun 2012 16:55:50 -0000


On 6/9/12 5:01 AM, "Alexander V. Chernikov" <melifaro@FreeBSD.org> wrote:

>It should disappear after 5-10 minutes. We're using several FreeBSD v9
>sensors with flowd and it seems to run fine (except first 5 minutes
>while waiting for template). I'm aware about the problem with templates
>timeout working incorrectly and I plan to fix this soon.

Looks like it has disappeared, however I am still not seeing any v9
collection.  I am assuming I am using export9 correctly in the ngctl
commands?

>
>>
>> Commands I am using to export v9 netflow records in ngctl:
>>
>> mkpeer bce0: netflow lower iface0
>> name bce0:lower netflow
>> connect bce0: netflow: upper out0
>> mkpeer netflow: ksocket export9 inet/dgram/udp
>> msg netflow:export9 connect inet/<IP ADDRESS>:<PORT>
>>
>>
>>
>
>--=20
>WBR, Alexander


Thanks

--Brent