Re: [Nfdump-discuss] nfcapd issue

[Peter H. <ph...@us...>]

Hi Emil,


On 11/04/15 21:34, Emil Askerov wrote:
> Hi all!
> First of all thanks for a great product.
> We were testing nfcapd for NAT logging purposes (NEL) with Cisco ASR 
> 1006 and it worked just great. Recently we switched to ASR 9000 series 
> and nothing works.

CISCO NEL is - to my knowledge - not that good documented. In order to track
the "new CISCO features" I would need to have a packet dump to the collector.
Feel free to send me a dump off list.

Regards

	- Peter

> nfcapd just ignores all incoming packets, but i can see packets via 
> tcpdump, moreover if i feed the .pcap to nfcpad via -f option, it 
> detects and logs all the flows.
> Is there any way to troubleshoot this issue, i.e. debug mode or 
> something like that?
> I've been google'ing this for couple of days now, tried to rise buffer 
> value in my OS as well, but no luck.
> Any help is greatly appreciated.
> Thanks in advice.
> Emil
> 
> ------------------------------------------------------------------------------
> BPM Camp - Free Virtual Workshop May 6th at 10am PDT/1PM EDT
> Develop your own process in accordance with the BPMN 2 standard
> Learn Process modeling best practices with Bonita BPM through live exercises
> http://www.bonitasoft.com/be-part-of-it/events/bpm-camp-virtual- event?utm_
> source=Sourceforge_BPM_Camp_5_6_15&utm_medium=email&utm_campaign=VA_SF
> _______________________________________________
> Nfdump-discuss mailing list
> Nfd...@li...
> https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
>