[Nfdump-discuss] Cannot replicate flows to external host
netflow collecting and processing tools
Brought to you by:
phaag
|
From: Stephen F. <sf...@li...> - 2015-08-05 20:43:46
|
Hi there, I'm running nfdump v1.6.13 and I've configured nfcapd to replicate incoming v9 flows to an external host, but there are errors in syslog and no egress flows are exported. Here's the config: /usr/local/bin/nfcapd -w -D -p 9995 -u www -g www -B 200000 -S 1 -P /var/run/p9997.pid -z -I lns01-cgy1 -l /var/nfsen/profiles-data/live/rtr1 -s -1000 -R 1.1.1.1/2005 I've verified nothing is being exported from the source server, and nothing is received by the destination server, using tcpdump. I'm seeing these messages repeatedly in my logs, and these only appear when nfcapd is configured to replicate flows: Aug 5 16:20:49 outpost05 nfcapd[87329]: ERROR: sendto(): Permission denied Aug 5 16:20:50 outpost05 nfcapd[87326]: ERROR: sendto(): Permission denied Aug 5 16:21:21 outpost05 last message repeated 46 times Any ideas? -- Stephen |