[c-nsp] Netflow with nfsen issue
Tom Hill
tom at ninjabadger.net
Fri Jul 1 12:47:51 EDT 2016
On 01/07/16 17:39, Satish Patel wrote:
> On nfdump i am seeing this.
>
> [root at netflow 30]# nfdump -M /data/nfsen/profiles-data/live/r1 -T -r
> nfcapd.201606301715 -a -c 10
> Date first seen Duration Proto Src IP Addr:Port
> Dst IP Addr:Port Packets Bytes Flows
> 1969-12-31 19:00:00.000 0.000 0 176.61.183.77:0 ->
> xx.xx.xx.98:0 56 2688 1
If the time is correct in the exported packets, then it makes me wonder
which version of nfdump you're using.
IPFIX might as well be 'Netflow v10', so support might be patchy with
older variants of nfcapd/nfdump.
--
Tom
More information about the cisco-nsp
mailing list