aiellc2 / flow-tools

Automatically exported from code.google.com/p/flow-tools
Other
0 stars 0 forks source link

Flow-tools log extra-traffic #12

Open GoogleCodeExporter opened 8 years ago

GoogleCodeExporter commented 8 years ago
What steps will reproduce the problem?
No special steps: flow-tools data in my case is wrong all the time.

What version of the product are you using? On what operating system?
OS: 7.2-RELEASE FreeBSD 7.2-RELEASE #0: Fri May  1 08:49:13 UTC 2009
flow-tools: 0.68.4.1

I have two different servers that collect netflow data coming from the same
Cisco 7507 router. First server runs on old RH linux with flow-tools 0.66.
Second one has got FreeBSD plus flow-tools 0.68, which I replaced with the
latest flow-tools-ng version.

The problem is that under FreeBSD flow-tools report different amount of
traffic per IP which is much more big than reported on another server under
Linux. I googled this but found no similar cases so it seems like I'm the
only one who faced this trouble. 

I performed some test sending fixed number of packets to check what server
lies. And it is definetely about the new one under FreeBSD. Sometimes it
reports proper amount of traffic per IP-address, but ususally it reports
more than what was really sent. It could be just "more" or exactly twice
more etc. Practically saying, for now I can't rely on server's outcome and
I'm very confused about that as I completely failed to understand what is
the bug about.

Will appreciate any support.

Original issue reported on code.google.com by ilya.t...@gmail.com on 28 Sep 2009 at 7:56