<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><br><div><div>Wiadomość napisana przez Sebastian Podjasek <<a href="mailto:sebastian@podjasek.pl">sebastian@podjasek.pl</a>> w dniu 16 lut 2016, o godz. 11:22:</div><br class="Apple-interchange-newline"><blockquote type="cite">
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
<div text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">W dniu 16.02.2016 o 01:08, Piotr Łyczba
pisze:<br>
</div>
<blockquote cite="mid:93416B61-FD6F-4F06-8186-ECB1B38B32C8@telesieci.pl" type="cite">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<font face="Courier">I have to start using a NAT on SE100 but I
have problem with loggin connections. </font>
<div><font face="Courier"><br>
</font>
<div><font face="Courier">I have configuration like this:</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier">(…)</font></div>
<div>
<div><font face="Courier"> nat logging-profile monitor</font></div>
<div><font face="Courier"> transport-protocol udp</font></div>
<div><font face="Courier"> export-version v9</font></div>
<div><font face="Courier"> source 10.32.0.90 port 9000</font></div>
<div><font face="Courier"> destination 10.32.0.10 context BGP
port 9000</font></div>
</div>
<br>
</div>
</blockquote>
<br>
CGNAT logging is in IPFIX, not rFlow as normal flow logging. <br></div></blockquote><div><br></div><div>It is like I thought.</div><br><blockquote type="cite"><div text="#000000" bgcolor="#FFFFFF">
So you need to use some ipfix collector instead of nfcap. <br>
You can try this (<a class="moz-txt-link-freetext" href="https://github.com/SPodjasek/libipfix">https://github.com/SPodjasek/libipfix</a>) libipfix
fork which has Ericsson fields enabled by default.<br>
<br></div></blockquote><div><br></div><div><div>I’ve tried compiling it on Debian ( version 6 and 8) and I got always the same error (from probe.c). Before I install new few ;) linux machines to try it compile, I have simple question : On which distro and which version do you use it ?</div><div><br></div></div></div><br></body></html>