Re: [Nfdump-discuss] NFDump messures half of bytes

[Peter H. <ph...@us...>]

Hi Alex,
Thanks for the report. In order to trace that down I would appreciate if you could provide me offline a tcpdump packet
trace to the sfcapd collector resulting from such a transfer. sfcapd should automatically adapt the right number of bytes.

	- Peter

On 1/6/12 10:58, Alexander Dube wrote:
> Hi there, 
> 
> we're implementing sflow/cflow traffic accounting with juniper and foundry routers/switches and nfdump v1.6 at the moment. 
> 
> In our tests we transferred multiple 2GB files, which should result in about ~1,5 million packets and ~222000000 bytes and saw about the half bytes only. Nfdump and nfsen are showing the right packetcount, but only about 90000000 - 120000000bytes.  For testing we used fixed sample rates from 2048 and 4096. Both results in the same issue. 
> 
> We can see this problem only with nfdump. PM and SFAcct are collecting the right size of bytes.
> 
> Is it a known bug in the version we use, or are we missing some configurations?  I searched the change logs and bug tracker, but I cant find something regarding this error.
> 
> SFCapd is started with the following command on an 64bit machine and is used to collect egress and ingress sflow data from one 10Gig interface per router. 
> /usr/bin/sfcapd -w -D -p 12009 -u www-data -g www-data -B 500000 -S 1 -P /var/run/nfsen/router1.pid -z -I router1 -l /usr/local/stow/nfsen-1.3.4/share/nfsen/profiles-data/live/router1
> 
> 
> Regards
> Alex
> 
> 
> ------------------------------------------------------------------------------
> Ridiculously easy VDI. With Citrix VDI-in-a-Box, you don't need a complex
> infrastructure or vast IT resources to deliver seamless, secure access to
> virtual desktops. With this all-in-one solution, easily deploy virtual 
> desktops for less than the cost of PCs and save 60% on VDI infrastructure 
> costs. Try it free! http://p.sf.net/sfu/Citrix-VDIinabox
> _______________________________________________
> Nfdump-discuss mailing list
> Nfd...@li...
> https://lists.sourceforge.net/lists/listinfo/nfdump-discuss

-- 
--
Be nice to your netflow data