cloudflare / goflow

The high-scalability sFlow/NetFlow/IPFIX collector used internally at Cloudflare.
BSD 3-Clause "New" or "Revised" License
859 stars 173 forks source link

Not receiving sflow even though UDP requests are incoming #10

Closed simPod closed 6 years ago

simPod commented 6 years ago

Running 2.0.4

./goflow -v
GoFlow v2.0.4

When started no flows are being displayed

./goflow -loglevel=debug  -kafka=false -netflow=false -sport=9992
INFO[0000] Starting GoFlow                               NetFlow=false sFlow=true
DEBU[0000] Starting workers                              Name=sFlow
INFO[0000] Listening on UDP :9992                        Type=sFlow

However when I run tcpdump -i enp175s0f1 udp and port 9992 I can see that sflow data are coming from that device through UDP.

Am I doing something wrong?

lspgn commented 6 years ago

Hi Simon, Any chances I could look at the flows?

Does netstat -tulpn | grep 9992 returns goflow? Need to check if the destination IP is correctly bound. Could also be a firewall issue.

simPod commented 6 years ago

Thanks for reply.

Yes, it does:

netstat -tulpn | grep 9992
udp6       0      0 :::9992                 :::*                                115217/./goflow
The firewall seems to be fine as I can see it flowing. Click to expand ``` tcpdump -i enp175s0f1 udp and port 9992 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on enp175s0f1, link-type EN10MB (Ethernet), capture size 262144 bytes 17:17:33.814646 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1349 17:17:33.815496 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1193 17:17:33.818081 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1213 17:17:33.818938 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1177 17:17:33.819802 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1181 17:17:33.821720 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1157 17:17:33.823487 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1213 17:17:33.831678 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:33.832569 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1357 17:17:33.833361 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:33.834989 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1373 17:17:33.835743 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1181 17:17:33.838890 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1209 17:17:33.839451 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:33.840314 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1209 17:17:33.841322 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:33.842788 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1169 17:17:33.844289 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1369 17:17:33.846105 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1377 17:17:33.847406 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1305 17:17:33.848231 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1213 17:17:33.849317 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1213 17:17:33.853639 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1385 17:17:33.854654 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1157 17:17:33.855882 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1269 17:17:33.856933 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1181 17:17:33.857388 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1393 17:17:33.859062 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1361 17:17:33.859524 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1365 17:17:33.860522 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1213 17:17:33.862796 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1181 17:17:33.864728 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1353 17:17:33.866133 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1209 17:17:33.868367 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1193 17:17:33.868937 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1393 17:17:33.869833 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1173 17:17:33.872609 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1377 17:17:33.873286 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1181 17:17:33.875350 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1205 17:17:33.877889 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:33.878140 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 249 17:17:33.878402 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1337 17:17:33.878548 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1173 17:17:33.878777 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:33.879104 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:33.880475 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:33.881733 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1381 17:17:33.883531 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1213 17:17:33.884918 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1341 17:17:33.885428 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1261 17:17:33.888079 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:33.890134 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1169 17:17:33.890954 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:33.893288 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1385 17:17:33.894200 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1309 17:17:33.895517 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1365 17:17:33.898334 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1365 17:17:33.899693 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1193 17:17:33.900091 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1193 17:17:33.902494 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1213 17:17:33.904430 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1373 17:17:33.905963 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:33.907185 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1301 17:17:33.908502 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:33.910089 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:33.911487 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1269 17:17:33.912258 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1297 17:17:33.912788 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1213 17:17:33.914573 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1357 17:17:33.915801 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1209 17:17:33.917185 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1173 17:17:33.918652 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:33.919750 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:33.920563 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1389 17:17:33.922253 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1349 17:17:33.923375 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:33.924976 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1181 17:17:33.925780 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1213 17:17:33.926603 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:33.928463 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1325 17:17:33.930098 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1173 17:17:33.932511 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1273 17:17:33.934596 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:33.936311 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1181 17:17:33.937859 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1365 17:17:33.938466 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1213 17:17:33.939557 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1213 17:17:33.941366 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1213 17:17:33.943245 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1213 17:17:33.945227 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1173 17:17:33.947980 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:33.950589 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1193 17:17:33.951297 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1173 17:17:33.952327 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1377 17:17:33.953712 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1209 17:17:33.955188 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:33.956117 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1173 17:17:33.959187 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1365 17:17:33.960174 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:33.961376 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:33.962153 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1213 17:17:33.964668 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:33.966769 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1201 17:17:33.967564 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1357 17:17:33.968434 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:33.969432 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1193 17:17:33.971032 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:33.972407 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1169 17:17:33.973188 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1209 17:17:33.974565 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1393 17:17:33.975865 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:33.977707 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1321 17:17:33.979067 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1181 17:17:33.980624 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1213 17:17:33.982053 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:33.983076 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:33.985231 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:33.987749 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:33.988588 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:33.990802 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1309 17:17:33.992545 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1157 17:17:33.995862 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1209 17:17:33.997980 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1317 17:17:34.000349 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.002050 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1181 17:17:34.004884 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1197 17:17:34.006123 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1213 17:17:34.006963 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1337 17:17:34.008455 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.009317 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1181 17:17:34.011102 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1365 17:17:34.012372 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1317 17:17:34.013811 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1357 17:17:34.015967 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1193 17:17:34.017535 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.021160 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1209 17:17:34.023778 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.026338 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1181 17:17:34.027613 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.028745 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.031471 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1333 17:17:34.033520 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1357 17:17:34.036732 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1181 17:17:34.038307 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1181 17:17:34.039672 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1281 17:17:34.042257 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1365 17:17:34.044861 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1357 17:17:34.046938 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1357 17:17:34.047801 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1173 17:17:34.049645 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1213 17:17:34.051014 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1389 17:17:34.051770 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.053425 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1377 17:17:34.054402 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1389 17:17:34.055365 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1389 17:17:34.056500 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1269 17:17:34.057172 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1381 17:17:34.060008 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1213 17:17:34.062125 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1393 17:17:34.063750 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1181 17:17:34.065454 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.066840 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.067700 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1329 17:17:34.069536 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1333 17:17:34.071111 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1345 17:17:34.071916 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1177 17:17:34.072618 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.073247 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.074973 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1357 17:17:34.076647 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1173 17:17:34.077197 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1181 17:17:34.078983 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1197 17:17:34.080302 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1337 17:17:34.080641 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1305 17:17:34.082316 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1373 17:17:34.083837 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1353 17:17:34.086334 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1193 17:17:34.088071 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1181 17:17:34.089544 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1165 17:17:34.091444 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.093049 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1293 17:17:34.094737 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1337 17:17:34.095470 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.096329 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.097674 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1181 17:17:34.098817 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1205 17:17:34.100076 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1193 17:17:34.100821 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1301 17:17:34.102840 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1389 17:17:34.104149 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1213 17:17:34.106253 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1329 17:17:34.108673 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1209 17:17:34.109720 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1357 17:17:34.110661 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1209 17:17:34.111319 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1197 17:17:34.113891 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1193 17:17:34.114623 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1213 17:17:34.115639 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.116061 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1305 17:17:34.117459 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.118280 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.120576 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1193 17:17:34.121989 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1373 17:17:34.123345 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1177 17:17:34.125293 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1353 17:17:34.127475 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1357 17:17:34.128802 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1173 17:17:34.129699 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1181 17:17:34.130825 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1213 17:17:34.132538 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1389 17:17:34.133296 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1209 17:17:34.134641 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1177 17:17:34.137471 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.139360 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1369 17:17:34.141552 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1181 17:17:34.143133 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1377 17:17:34.145185 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1181 17:17:34.146387 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.147388 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1177 17:17:34.148517 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1181 17:17:34.150305 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1209 17:17:34.152003 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1181 17:17:34.153100 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1349 17:17:34.154508 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1365 17:17:34.157368 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1181 17:17:34.159663 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1389 17:17:34.161301 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1349 17:17:34.163005 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1357 17:17:34.164022 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1313 17:17:34.167310 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.168699 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1181 17:17:34.169797 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1181 17:17:34.172545 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1173 17:17:34.173595 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.175431 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1213 17:17:34.177240 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.177951 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.179433 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.180171 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1181 17:17:34.181096 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1349 17:17:34.183526 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1377 17:17:34.185928 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1361 17:17:34.187361 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1333 17:17:34.187930 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1201 17:17:34.189932 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1341 17:17:34.191872 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1389 17:17:34.193335 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1181 17:17:34.194666 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1181 17:17:34.196278 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1301 17:17:34.197808 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1365 17:17:34.200513 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1157 17:17:34.201681 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1181 17:17:34.202098 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1181 17:17:34.202962 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.205270 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1337 17:17:34.206800 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1321 17:17:34.209373 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.209751 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1221 17:17:34.212382 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1201 17:17:34.214385 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.216163 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1389 17:17:34.217713 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1361 17:17:34.218797 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1181 17:17:34.219414 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1389 17:17:34.221838 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1181 17:17:34.222946 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1209 17:17:34.223641 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1181 17:17:34.225956 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1181 17:17:34.227886 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.229619 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1209 17:17:34.230441 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1329 17:17:34.232475 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1357 17:17:34.233283 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1337 17:17:34.233872 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.235348 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1181 17:17:34.236143 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1369 17:17:34.237592 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.240242 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1173 17:17:34.242249 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.242794 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1209 17:17:34.243572 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1209 17:17:34.245426 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1345 17:17:34.246462 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1181 17:17:34.247012 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1209 17:17:34.248795 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.250673 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1317 17:17:34.251804 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1173 17:17:34.254832 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.256081 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1213 17:17:34.257917 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1389 17:17:34.260935 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1341 17:17:34.263875 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1393 17:17:34.265386 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.266352 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1181 17:17:34.267896 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1229 17:17:34.268923 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1181 17:17:34.270686 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1193 17:17:34.271909 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.273412 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1341 17:17:34.275005 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1181 17:17:34.275794 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.277451 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1301 17:17:34.279032 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1181 17:17:34.280727 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1353 17:17:34.282363 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1357 17:17:34.284285 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1193 17:17:34.285820 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1365 17:17:34.287423 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1213 17:17:34.288860 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.289497 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1321 17:17:34.291330 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1361 17:17:34.293085 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.294349 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1205 17:17:34.297151 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1365 17:17:34.298335 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1165 17:17:34.300016 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.300690 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.302243 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1357 17:17:34.304398 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1205 17:17:34.306578 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1365 17:17:34.308232 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1393 17:17:34.309686 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1345 17:17:34.310710 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1313 17:17:34.311733 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1209 17:17:34.312695 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.316039 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1309 17:17:34.317869 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1357 17:17:34.318620 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1181 17:17:34.320258 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1357 17:17:34.322599 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1193 17:17:34.323782 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1173 17:17:34.326197 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1373 17:17:34.328612 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1393 17:17:34.330348 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1369 17:17:34.331375 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.332947 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1389 17:17:34.335499 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1393 17:17:34.336205 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.337390 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1293 17:17:34.338638 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1181 17:17:34.341032 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1181 17:17:34.342343 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1357 17:17:34.344321 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1209 17:17:34.345718 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.347618 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.349047 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1181 17:17:34.351271 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1365 17:17:34.354339 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1321 17:17:34.356955 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1209 17:17:34.358057 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1185 17:17:34.359546 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1189 17:17:34.360412 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.361440 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1209 17:17:34.364028 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1357 17:17:34.365521 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.366538 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1381 17:17:34.367623 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1261 17:17:34.368496 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1393 17:17:34.369033 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.371243 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1209 17:17:34.372236 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.372926 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1365 17:17:34.373544 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1181 17:17:34.374685 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1389 17:17:34.376194 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1237 17:17:34.379760 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1213 17:17:34.381931 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1385 17:17:34.383641 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1173 17:17:34.386283 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1349 17:17:34.389842 IP device.hostname.com.37075 > server.hostname.com.9992: UDP, length 1337 ^C 370 packets captured 1347 packets received by filter 867 packets dropped by kernel ```
lspgn commented 6 years ago

Does nc -lu 9992 > data.bin receives something?

simPod commented 6 years ago

Tried with p (UDP listen needs -p arg)

nc -lup 9992 > data.bin
Can't grab 0.0.0.0:9992 with bind
simPod commented 6 years ago

That was because the goflow was running. When I stop goflow, it outputs nothing 🤔

lspgn commented 6 years ago

Is the data.bin file empty?

I think it's a firewall issue. iptables -L INPUT -n may have a drop policy? Is server.hostname.com IP added to any interface? show route table all | grep IP (with IP being the IP of destination)?

simPod commented 6 years ago

Indeed it was. Thanks for help, much appreciated!