[c-nsp] Netflow with nfsen issue

Tom Hill tom at ninjabadger.net
Fri Jul 1 12:47:51 EDT 2016


On 01/07/16 17:39, Satish Patel wrote:
> On nfdump i am seeing this.
> 
> [root at netflow 30]# nfdump -M /data/nfsen/profiles-data/live/r1  -T  -r
> nfcapd.201606301715 -a -c 10
> Date first seen          Duration Proto      Src IP Addr:Port
> Dst IP Addr:Port   Packets    Bytes Flows
> 1969-12-31 19:00:00.000     0.000     0    176.61.183.77:0     ->
> xx.xx.xx.98:0           56     2688     1

If the time is correct in the exported packets, then it makes me wonder
which version of nfdump you're using.

IPFIX might as well be 'Netflow v10', so support might be patchy with
older variants of nfcapd/nfdump.

-- 
Tom


More information about the cisco-nsp mailing list