[flow-tools] flow-import problems

Alexander Serkin als@cell.ru
Wed, 04 Dec 2002 13:29:56 +0300


Hello,
Can anybody help me to understand flow-import?
I'm collecting flow by cflowd with the following
configuration:

CISCOEXPORTER {
    HOST:         x.x.x.x
    ADDRESSES:    { x.x.x.x }
    CFDATAPORT:   2055
    SNMPCOMM:     'public'
    LOCALAS:      MYASNUM
    COLLECT:      { netmatrix, ifmatrix, portmatrix, asmatrix
   }
}

The artsnets utility produces valid information.
But after doing

flow-import -V5 -f0 < arts.YYYYMMDD > ft-YYYYMMDD

the command

flow-cat ft-YYYYMMDD | flow-stat -f10 -S3

gives some absolutely fantastic data far from
real src/dst IP addresses.

SY,
--
Alexander