<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">W dniu 16.02.2016 o 01:08, Piotr Łyczba
pisze:<br>
</div>
<blockquote
cite="mid:93416B61-FD6F-4F06-8186-ECB1B38B32C8@telesieci.pl"
type="cite">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<font face="Courier">I have to start using a NAT on SE100 but I
have problem with loggin connections. </font>
<div><font face="Courier"><br>
</font>
<div><font face="Courier">I have configuration like this:</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier">(…)</font></div>
<div>
<div><font face="Courier"> nat logging-profile monitor</font></div>
<div><font face="Courier"> transport-protocol udp</font></div>
<div><font face="Courier"> export-version v9</font></div>
<div><font face="Courier"> source 10.32.0.90 port 9000</font></div>
<div><font face="Courier"> destination 10.32.0.10 context BGP
port 9000</font></div>
</div>
<br>
</div>
</blockquote>
<br>
CGNAT logging is in IPFIX, not rFlow as normal flow logging. <br>
So you need to use some ipfix collector instead of nfcap. <br>
You can try this (<a class="moz-txt-link-freetext" href="https://github.com/SPodjasek/libipfix">https://github.com/SPodjasek/libipfix</a>) libipfix
fork which has Ericsson fields enabled by default.<br>
<br>
<br>
<pre class="moz-signature" cols="72">--
Sebastian Podjasek
</pre>
</body>
</html>