netsampler / goflow2

High performance sFlow/IPFIX/NetFlow Collector
BSD 3-Clause "New" or "Revised" License
487 stars 112 forks source link

Help needed please ! #349

Closed jihadismail8 closed 2 months ago

jihadismail8 commented 2 months ago

with tcpdump i can clearly see that i am getting some sflow data . but using goflow to output anything is not working ! i can not understand why , its driving me crazy . i tried in docker nothing !! i tried git clone repo then " sudo go run cmd/goflow2/main.go 2> /dev/null " also nothing , i tried simply the binery with sudo ./goflow2 also nothing .

laptop:~$ sudo tcpdump -i wlp0s20f3 udp port 6343 -vvv
tcpdump: listening on wlp0s20f3, link-type EN10MB (Ethernet), snapshot length 262144 bytes
22:52:49.604625 IP (tos 0x0, ttl 51, id 6646, offset 0, flags [DF], proto UDP (17), length 1316)
    91.90.209.194.36649 > sad-laptop.6343: [udp sum ok] sFlowv5, IPv4 agent 15.52.54.59, agent-id 100000, seqnum 48767, uptime 127096088, samples 9, length 1288
    counter sample (2), length 132, seqnum 6107, type 0, idx 48, records 2
        enterprise 0, Unknown (1005) length 16
        enterprise 0, Generic counter (1) length 88
          ifindex 48, iftype 6, ifspeed 10000000000, ifdirection 0 (unknown)
          ifstatus 3, adminstatus: up, operstatus: up
          In octets 1271377, unicast pkts 0, multicast pkts 4287, broadcast pkts 0, discards 4
          In errors 0, unknown protos 0
          Out octets 1283715, unicast pkts 0, multicast pkts 4256, broadcast pkts 0, discards 0
          Out errors 0, promisc mode 0
    counter sample (2), length 132, seqnum 6108, type 0, idx 47, records 2
        enterprise 0, Unknown (1005) length 16
        enterprise 0, Generic counter (1) length 88
          ifindex 47, iftype 6, ifspeed 10000000000, ifdirection 0 (unknown)
          ifstatus 1, adminstatus: up, operstatus: down
          In octets 0, unicast pkts 0, multicast pkts 0, broadcast pkts 0, discards 0
          In errors 0, unknown protos 0
          Out octets 0, unicast pkts 0, multicast pkts 0, broadcast pkts 0, discards 0
          Out errors 0, promisc mode 0
    counter sample (2), length 132, seqnum 6107, type 0, idx 46, records 2
        enterprise 0, Unknown (1005) length 16
        enterprise 0, Generic counter (1) length 88
          ifindex 46, iftype 6, ifspeed 10000000000, ifdirection 0 (unknown)
          ifstatus 1, adminstatus: up, operstatus: down
          In octets 0, unicast pkts 0, multicast pkts 0, broadcast pkts 0, discards 0
          In errors 0, unknown protos 0
          Out octets 0, unicast pkts 0, multicast pkts 0, broadcast pkts 0, discards 0
          Out errors 0, promisc mode 0
lspgn commented 2 months ago

I cannot help you without any debugging information. There are issue templates. Please add a correct title

the log output you provided only shows only counter samples which GoFlow2 only decodes in -producer=raw mode.