search

phaag / nfdump

Netflow processing tools
Other
789 stars 206 forks source link

Help: Can't get any sFlow with N4064 DELL Stack #53

Closed whitetiger21022014 closed 7 years ago

whitetiger21022014 commented 7 years ago

Dear All, I have problem as below. If anyone can fix, please share your experience I can't get any sflow from DELL switch, sfcapd has 276 bytes size Firmware: Dell Networking N4064, 6.2.6.6, Linux 3.7.10-8c2e3085, Dell 48 Port 10GBaseT Ethernet 2 Switches Stack together, Switch IP: 172.16.15.1

sFlow in Switch Clock time is exact Console(config)#sflow 1 destination 172.16.15.9 2055 Console(config)#sflow 1 destination owner Flow1 timeout 2000000000 Console(config)#sflow 1 polling tengigabitethernet 1/0/47-1/0/48 30 Console(config)#sflow 1 polling tengigabitethernet 2/0/47-2/0/48 30 (I don't enter any sampling command as: sflow 1 sampling tengigabitethernet ...)

sfcapd CMD: /usr/local/bin/sfcapd -w -D -p 2055 -u test -g apache -B 10240000 -S 1 -P /var/run/p2055.pid -z -T +6,+10,+12,+13,+14,+33 -t 300 -I sFlow -l /test/profiles-data/live/sFlow

tcpdump: can see packet from DELL Switch 15:27:39.370014 IP 172.16.15.1.sflow > 172.16.15.9.iop: sFlowv5, IPv4 agent 172.16.15.1, agent-id 3, length 748

WireShark

pcap1 pcap2

Notes: another test hsflowd Linux sends sFlow to sfcapd: successful use PRTG or sFlowTrend-pro can NOT get sflow from DELL switch

whitetiger21022014 commented 7 years ago

maybe I just use flow counter and don't have flow samples command. I will check