<div dir="ltr"><div>Yo con huawei uso sflow como exporter en lugar de netflow</div><div><br></div><div>#<br>interface XGigabitEthernet0/0/XX<br> description L2L-XXX<br> port link-type trunk<br> vcmp disable<br> port trunk allow-pass vlan XXX XXX XXX<br> port negotiation disable<br> loopback-detect enable<br> stp loop-protection<br> stp bpdu-filter enable<br> stp edged-port disable<br> undo ntdp enable<br> undo ndp enable<br><b> sflow flow-sampling collector 1<br> sflow flow-sampling rate 8192<br></b> port-security enable<br> port-security max-mac-num 32 <br> port-security aging-time 1440 type inactivity<br>#</div><div>sflow collector 1 ip <b>[IP-Colector-nfsen]</b> port <b>9998</b> description <b>[s6720-xxx]</b><br>#<br>sflow agent ip <b>[src-address]</b><br>#<br></div><div><br></div><div>Y en el colector la linea de configuración: <b>nfsen.conf</b><br></div><div>%sources = (<br> 'MIKROTIK' => { 'port' => '9996', 'col' => '#00ff00', 'type' => 'netflow' }, <br> '<b>s6720-XXX</b>' => { 'port' => '9998', 'col' => '#66ff66', 'type' => '<b>sflow</b>' },<br>);</div><div><br></div><div>Verifica que tengas funcionando el módulo sflow (sfcapd), para netflow (nfcapd), esto me enseño Pablo Fritz! ;-)</div><div><br></div><div><div><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><span style="font-family:verdana,sans-serif"><font color="#000000"><font size="2"><b>Lic. Darío Fernández<br>Research SRL<br></b><span style="color:rgb(68,68,68)"><i>Coord. Técnico IXP Posadas - CABASE<br>(0376) 154619600 (Personal)<br>(0376) 154254938 (Claro) <br>Av. Tomas Guido 4435 - Posadas - Misiones</i></span></font></font></span><br></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div><br></div></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">El sáb., 6 de jun. de 2020 a la(s) 23:34, <<a href="mailto:frsoto@gmail.com">frsoto@gmail.com</a>> escribió:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div lang="ES"><div class="gmail-m_-1152385935027559733WordSection1"><p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri",sans-serif">Estimados, una consulta por favor sobre nfsen<u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri",sans-serif"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri",sans-serif">Me pasa q de los tres flujos que configure, solo me funciona uno. El del mikrotik<u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri",sans-serif">Pero el swich Huawei y el router Cisco, genera los archivos de nfdump vacíos. <u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri",sans-serif"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri",sans-serif"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri",sans-serif;background:red none repeat scroll 0% 0%">netflow 21736 1 0 22:55 ? </span><span style="font-size:11pt;font-family:"Calibri",sans-serif;background:red none repeat scroll 0% 0%" lang="EN-US">00:00:00 /opt/nfdump/bin/sfcapd -w -D -p 6343 -u netflow -g apache -B 200000 -S 1 -P /data/nfsen/var/run/p6343.pid -z -I</span><span style="font-size:11pt;font-family:"Calibri",sans-serif" lang="EN-US"> SW HUAWEI<u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri",sans-serif;background:lime none repeat scroll 0% 0%" lang="EN-US">netflow 21739 1 0 22:55 ? 00:00:00 /opt/nfdump/bin/nfcapd -w -D -p 9995 -u netflow -g apache -B 200000 -S 1 -P /data/nfsen/var/run/p9995.pid -z -I</span><span style="font-size:11pt;font-family:"Calibri",sans-serif" lang="EN-US"> MIKROTIK<u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri",sans-serif;background:red none repeat scroll 0% 0%" lang="EN-US">netflow 21742 1 0 22:55 ? 00:00:00 /opt/nfdump/bin/nfcapd -w -D -p 9996 -u netflow -g apache -B 200000 -S 1 -P /data/nfsen/var/run/p9996.pid -z -I</span><span style="font-size:11pt;font-family:"Calibri",sans-serif" lang="EN-US"> CISCO<u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri",sans-serif" lang="EN-US"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri",sans-serif">Verifique por tcpdump q recibo paquetes de los tres equipos.<u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri",sans-serif"><u></u> <u></u></span></p><p class="MsoNormal"><img style="width: 9.9375in; height: 4.9479in;" id="gmail-m_-1152385935027559733Imagen_x0020_1" src="cid:172940eda814cff311" width="954" height="475"><span style="font-size:11pt;font-family:"Calibri",sans-serif"><u></u><u></u></span></p></div></div>_______________________________________________<br>
Lista mailing list<br>
<a href="mailto:Lista@arnog.com.ar" target="_blank">Lista@arnog.com.ar</a><br>
<a href="http://mailmancabase.interdotnet.com.ar/mailman/listinfo/lista" rel="noreferrer" target="_blank">http://mailmancabase.interdotnet.com.ar/mailman/listinfo/lista</a><br>
</blockquote></div>