search

irino / softflowd

softflowd: A flow-based network traffic analyser capable of Cisco NetFlow data export software.
https://github.com/irino/softflowd
Other
162 stars 29 forks source link

no probes on/from a bridge interface #35

Open PetruGarstea opened 3 years ago

PetruGarstea commented 3 years ago

Greetings,

FreeBSD12.1 softflowd-1.0.0

Diagram:

epairA - epairB bridge0 
vlan0

case 1: softflowd listens bridge0 interface and doesnt send or show any flows to the analyzer.

case2: softflowd listens vlan0 interface, there are flows except flows that are originating via bridge0 interface.

I believe that is OS kernel specifics because I am getting the same results with ng_netflow, however I am wondering if that can be sorted out.

Cheers, Petru

nightflyza commented 3 years ago

vlan id 0 aka 0x000 and vlan id 4095 aka 0xfff are reserved vlan ids. Seems it isn't legal to use it on trunk ports or bridge interfaces. With normal vlans in bridge interface all works fine.

sfd

Yep. softflowd-0.9.9_1 and FreeBSD 12.1-RELEASE

PetruGarstea commented 3 years ago

actually, I have to mention that in my case vlan0 is the name of the interface with vlan id 10

PetruGarstea commented 3 years ago

@nightflyza ok, I have spent more time on configuration and data analysis validation and concluded that softflowd works fine.

Cheers