Menu

#3 sending IP address with netflow export

open
nobody
None
5
2005-07-22
2005-07-22
Anonymous
No

Is there a possibility to set sending
ip address with netflow export. I use ipcad on router
with dynamic multipath routing and it is problem with
flow-capture when src address changes.

syslog out:

Jul 22 06:25:56 netflow flow-capture[397]:
ftpdu_seq_check(): src_ip=xxx.xxx.1.14
dst_ip=yyy.yyy.4.249 d_version=5 expecting=163001290
received=163001389 lost=99
Jul 22 06:25:57 netflow flow-capture[397]:
ftpdu_seq_check(): src_ip=xxx.xxx.1.10
dst_ip=yyy.yyy.4.249 d_version=5 expecting=163001389
received=163001434 lost=45
Jul 22 06:25:58 netflow flow-capture[397]:
ftpdu_seq_check(): src_ip=xxx.xxx.1.14
dst_ip=yyy.yyy.4.249 d_version=5 expecting=163001434
received=163001454 lost=20
Jul 22 06:25:59 netflow flow-capture[397]:
ftpdu_seq_check(): src_ip=xxx.xxx.1.10
dst_ip=yyy.yyy.4.249 d_version=5 expecting=163001454
received=163001476 lost=22
Jul 22 06:26:00 netflow flow-capture[397]:
ftpdu_seq_check(): src_ip=xxx.xxx.1.14
dst_ip=yyy.yyy.4.249 d_version=5 expecting=163001476
received=163001517 lost=41
Jul 22 06:26:01 netflow flow-capture[397]:
ftpdu_seq_check(): src_ip=xxx.xxx.1.10
dst_ip=yyy.yyy.4.249 d_version=5 expecting=163001517
received=163001532 lost=15
Jul 22 06:26:02 netflow flow-capture[397]:
ftpdu_seq_check(): src_ip=xxx.xxx.1.14
dst_ip=yyy.yyy.4.249 d_version=5 expecting=163001532
received=163001543 lost=11
Jul 22 06:26:03 netflow flow-capture[397]:
ftpdu_seq_check(): src_ip=xxx.xxx.1.10
dst_ip=yyy.yyy.4.249 d_version=5 expecting=163001543
received=163001566 lost=23
Jul 22 06:26:05 netflow flow-capture[397]:
ftpdu_seq_check(): src_ip=xxx.xxx.1.14
dst_ip=yyy.yyy.4.249 d_version=5 expecting=163001566
received=163001630 lost=64
Jul 22 06:26:07 netflow flow-capture[397]:
ftpdu_seq_check(): src_ip=xxx.xxx.1.10
dst_ip=yyy.yyy.4.249 d_version=5 expecting=163001630
received=163001669 lost=39
Jul 22 06:26:10 netflow flow-capture[397]:
ftpdu_seq_check(): src_ip=xxx.xxx.1.14
dst_ip=yyy.yyy.4.249 d_version=5 expecting=163001669
received=163001720 lost=51

thanks
kleo

kleo_at_netbox_dot_cz

Discussion


Log in to post a comment.