Re: [Nfdump-discuss] nfcapd stores no data

[Mark D. N. <mn...@wi...>]

ph...@ca... wrote:
>
> If I do a packet capture I see tons of flows in the netflow packets. All
> the flow files on the disk are the same size - 276 bytes, and nfdump shows
> no flows captured.
>
> Anybody knows why this might be happening?
>   

If your router is configured properly to send to the capture server on 
that port, then my first guess would be some sort of firewall blocking 
the traffic (possibly iptables or equiv on the capture server?).  Use 
tcpdump to watch for the traffic to see if it is at least making it to 
your server.  If not, check for a firewall in the middle.  If not that, 
then you may have a configuration problem on your router for the flow 
export.

Regards,
Mark

-- 
Mark D. Nagel, CCIE #3177 <mn...@wi...>
Principal Consultant, Willing Minds LLC (http://www.willingminds.com)
cell: 949-279-5817, desk: 714-630-4772, fax: 949-623-9854

*** Please send support requests to su...@wi...! ***