<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:st1="urn:schemas-microsoft-com:office:smarttags" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="State"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="place"/>
<!--[if !mso]>
<style>
st1\:*{behavior:url(#default#ieooui) }
</style>
<![endif]-->
<style>
<!--
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
span.E-MailFormatvorlage17
{mso-style-type:personal-compose;
font-family:Arial;
color:windowtext;}
@page Section1
{size:595.3pt 841.9pt;
margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=DE link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Hi,<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt;font-family:Arial'>i have created a scenario in which i receive the
netflow streams from three different routers. These three streams reach my
system all on the same interface. On this interface the streams get caught by
flow-fanout and I distribute them to the loopback interface on two difeerent
ports. This is working great so far. <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt;font-family:Arial'>But I Added a new interface to the system on which I wanted
to receive streams for testing. Via tcpdump I can see packages reaching this
interface on the correct port. But when I try to distribute this stream via
flow-fanout, nothing happens. The stream unlike the others is not duplicated to
the two ports on the loopback interface.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt;font-family:Arial'>Flow-fanout is called like this for the working
interface<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt;font-family:Arial'>flow-fanout hostadress/exporteraddress/9600 0/0/9610
0/0/9620<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt;font-family:Arial'>flow-fanout hostadress/exporteraddress/9700 0/0/9710
0/0/9720<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt;font-family:Arial'>flow-fanout hostadress/exporteraddress/9800 0/0/9810
0/0/9820<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt;font-family:Arial'>For the not working interface I called it like this:<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt;font-family:Arial'>flow-fanout 10.1.1.121/exporteradress/9900 0/0/9910<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt;font-family:Arial'>I don’t understand why the last example doesn’t
work. Anyone who can give me a hint what I am doing wrong or knows that I make
mistake here? Any help is highly appreciated.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt;font-family:Arial'>Mit freundlichen Grüßen</span></font><span
lang=EN-GB><o:p></o:p></span></p>
<div>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt;font-family:Arial'>Kai Zemke</span></font><span lang=EN-GB><o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span lang=EN-GB
style='font-size:12.0pt'> <o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt;font-family:Arial'>=====================</span></font><font size=2
face=Arial><span style='font-size:10.0pt;font-family:Arial'>======================================
<br>
smartnet Online Service GmbH, Schnackenburgallee 177, 22525 <st1:State w:st="on"><st1:place
w:st="on">Hamburg</st1:place></st1:State> <br>
=========================================================== <br>
Geschäftsführer: Christian Suding, Claus Masch <br>
Ust.IdNr.:DE191136350<br>
Handelsregister HRB 66463 <br>
Steuernummer: FA: Hamburg 54/855/01047<br>
Fon: +49 (0) 40 5540-0<br>
Fax: +49 (0) 40 5540-1040<br>
<a href="mailto:kai.zemke@smartnet.de"
title="blocked::mailto:ute.kluetz@smartnet.de">kai.zemke@smartnet.de</a><br>
Weitere Informationen siehe: <a href="http://www.smartnet.de/"
title="blocked::http://www.smartnet.de/">http://www.smartnet.de</a><br>
=========================================================== </span></font><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'> <o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Hinweis:<br>
Diese Email kann vertrauliche und/oder rechtlich geschützte <br>
Informationen enthalten. Wenn Sie nicht der beabsichtigte <br>
Empfänger sind oder diese Email irrtümlich erhalten haben, <br>
informieren Sie bitte sofort den Absender telefonisch oder <br>
per Email und löschen Sie diese Email aus Ihrem System. <br>
Das unerlaubte Kopieren, sowie die unbefugte Weitergabe <br>
dieser Email ist nicht gestattet.Wir haften nicht für die <br>
Unversehrtheit von Emails, nachdem sie unseren Einfluss-<br>
Bereich verlassen haben.</span></font><o:p></o:p></p>
</div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
</div>
<HR><Font face=arial size=2 color=black><I>
IMPORTANT: The contents of this email and any attachments are confidential. They are intended for the
named recipient(s) only.<BR>
If you have received this email in error, please notify the system manager or the sender immediately and do
not disclose the contents to anyone or make copies thereof.<BR>
</I><B>*** eSafe scanned this email for viruses, vandals, and malicious content. ***</B>
</font><HR>
</body>
</html>