Subject: I don't have INBOUND Traffic - WHY?
From: Alexandra Alvarado (aaaa@telconet.net)
Date: Thu Oct 18 2001 - 18:47:30 CDT
Hi, I'm Alexandra
Well, now FlowScan is installed and working, but i only can see outbound
Traffic i don't know why, i don't have any error messange, WHY I CAN'T
SEE INBOUND TRAFFIC!!!
=======================
Router Configuration
ip flow-cache timeout active 1
lane client flush
!
interface Ethernet0/0
ip address 10.10.10.1 255.255.255.252
ip route-cache flow
!
interface Serial3/0
bandwidth 4480
ip address 20.20.20.1 255.255.255.252
no ip redirects
encapsulation ppp
ip route-cache flow
!
interface Serial3/1
bandwidth 4480
ip address 20.20.20.1 255.255.255.252
encapsulation ppp
shutdown
!
interface Serial3/2
no ip address
shutdown
!
interface Serial3/3
no ip address
shutdown
!
ip flow-export source Null0
ip flow-export version 5 peer-as
ip flow-export destination 30.30.30.74 2055
============================
cflowd.conf file configuration
OPTIONS {
LOGFACILITY: local6
TCPCOLLECTPORT: 2056
PKTBUFSIZE: 2097152
TABLESOCKFILE: /usr/local/arts/etc/cflowdtable.socket
FLOWDIR: /usr/local/arts/data/cflowd/flows
FLOWFILELEN: 1000000
NUMFLOWFILES: 10
MINLOGMISSED: 1000
}
COLLECTOR {
HOST: 30.30.30.74 # IP address of central collector
ADDRESSES: { 30.30.30.74 }
AUTH: none
}
CISCOEXPORTER {
HOST: 10.10.10.1 # IP address of Cisco sending data.
ADDRESSES: { 10.10.10.1, # Addresses of interfaces on Cisco
20.20.20.1 } # sending data.
CFDATAPORT: 2055 # Port on which to listen for data.
SNMPCOMM: 'public' # SNMP community name.
LOCALAS: 1324 # Local AS of Cisco sending data.
}
========================
CampusIO.cf file configuration
OutputIfIndexes 1, 2, 6
LocalSubnetFiles /usr/local/arts/bin/local_nets.boulder
OutputDir /usr/local/arts/graphs
Protocols icmp, tcp, udp
TCPServices ftp-data, ftp, smtp, nntp, http, https, rtsp, pop-3, ssh,
asp, ircd, sunrpc, telnet, time, tftp, netbios-ns, netbios-dgm,
netbios-ssn, imap, bgp
NapsterSubnetFiles /usr/local/arts/bin/Napster_subnets.boulder
NapsterSeconds 1800
ASPairs 0:0
Thanks
Alexandra Alvarado
--
Help mailto:majordomo@net.doit.wisc.edu and say "help" in message body
Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
"unsubscribe flowscan" in message body
Archive http://net.doit.wisc.edu/~plonka/list/flowscan/archive/
This archive was generated by hypermail 2b25 : Thu Oct 18 2001 - 18:49:51 CDT