[Flow-tools] flow-capture runs but does not create files

[Joe Loiacono]

So I'm thinking the exported packets are all empty. They arrive every 26 
seconds and are exactly 72 bytes long.

Probably my switch configuration ...




Joe Loiacono/CIV/CSC at CSC 
Sent by: flow-tools-bounces at list.splintered.net
12/27/2007 12:18 PM

To
flow-tools at list.splintered.net
cc

Subject
[Flow-tools] flow-capture runs but does not create files







I've started flow-capture and found it to be listening on the specified 
port. The following messages look good: 

>From /var/log/messages: 

Dec 27 11:59:12 localhost flow-capture[8894]: setsockopt(size=4194304) 

[root at localhost Lab_RightRack_6509]$ netstat -an | grep 4003 
udp        0      0 0.0.0.0:4003                0.0.0.0:* 

I am exporting version 5 packet from a 6509 and have verified via tcpdump 
that packets are arriving at the collector. I've given the target 
directory full 0777 permissions. 

But flow-capture is not writing any directories (e.g., 
2007/2007-12/2007-12-27) or any data files. 

Any ideas? 

Thanks, 

Joe 

flow-tools version 0.68.3 
Red Hat: Linux localhost.localdomain 2.6.9-67.0.1.ELsmp #1 SMP Fri Nov 30 
11:51:05 EST 2007 i686 i686 i386 GNU/Linux
_______________________________________________
Flow-tools mailing list
flow-tools at splintered.net
http://mailman.splintered.net/mailman/listinfo/flow-tools
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.splintered.net/pipermail/flow-tools/attachments/20071227/e0d5d797/attachment-0001.htm