From owner-freebsd-net@FreeBSD.ORG  Mon Jun 11 17:37:34 2012
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx2.freebsd.org (mx2.freebsd.org [69.147.83.53])
	by hub.freebsd.org (Postfix) with ESMTP id 01BAE1065672
	for <freebsd-net@freebsd.org>; Mon, 11 Jun 2012 17:37:34 +0000 (UTC)
	(envelope-from melifaro@FreeBSD.org)
Received: from dhcp170-36-red.yandex.net (freefall.freebsd.org
	[IPv6:2001:4f8:fff6::28])
	by mx2.freebsd.org (Postfix) with ESMTP id E226814DEB0;
	Mon, 11 Jun 2012 17:36:20 +0000 (UTC)
Message-ID: <4FD62C86.4020905@FreeBSD.org>
Date: Mon, 11 Jun 2012 21:36:06 +0400
From: "Alexander V. Chernikov" <melifaro@FreeBSD.org>
User-Agent: Mozilla/5.0 (X11; FreeBSD amd64;
	rv:12.0) Gecko/20120511 Thunderbird/12.0.1
MIME-Version: 1.0
To: "Kolasinski, Brent D." <bkolasinski@anl.gov>
References: <CBFB8BDA.5E15%bkolasinski@anl.gov>
In-Reply-To: <CBFB8BDA.5E15%bkolasinski@anl.gov>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cc: "freebsd-net@freebsd.org" <freebsd-net@freebsd.org>
Subject: Re: Netgraph and Netflow-v9
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 11 Jun 2012 17:37:34 -0000

On 11.06.2012 20:55, Kolasinski, Brent D. wrote:
>
> On 6/9/12 5:01 AM, "Alexander V. Chernikov"<melifaro@FreeBSD.org>  wrote:
>
>> It should disappear after 5-10 minutes. We're using several FreeBSD v9
>> sensors with flowd and it seems to run fine (except first 5 minutes
>> while waiting for template). I'm aware about the problem with templates
>> timeout working incorrectly and I plan to fix this soon.
I've done some additional tests and it seems that templates are sent in 
regular intervals exactly as specified in 'settemplate'.
However I still haven't tested this on real collector.
>
> Looks like it has disappeared, however I am still not seeing any v9
> collection.  I am assuming I am using export9 correctly in the ngctl
> commands?
It seems so.

Can you show "ngctl msg netflow: info" ouput ?

 > 1) bce0 -> in promiscuous mode listening to traffic off of a tap

Does bce0 have both UP and RUNNING flags set ?
>
>>
>>>
>>> Commands I am using to export v9 netflow records in ngctl:
>>>
>>> mkpeer bce0: netflow lower iface0
>>> name bce0:lower netflow
>>> connect bce0: netflow: upper out0
>>> mkpeer netflow: ksocket export9 inet/dgram/udp
>>> msg netflow:export9 connect inet/<IP ADDRESS>:<PORT>
>>>
>>>
>>>
>>
>> --
>> WBR, Alexander
>
>
> Thanks
>
> --Brent
>
>


-- 
WBR, Alexander