Hello again, Somehow I have the idea I don''t receive any IPv6 flows (flows with src/dst IPv6 address records). I''m using the latest snapshot (20051001, in changelog there is no change since this release). I tried with other capture daemon, and I really receive IPv6 stuff, so it is not a router miss-configuration. I created a rule in my flowd.conf: discard all accept inet6 This doesn''t work. I still see ipv4 stuff. So I tried: discard inet This doesn''t work. I still see ipv4 stuff. So I tried: discard ! inet This does something. Now I don''t see _any_ flows. After a couple of hours trying different combinations and checking, I really have no ideas anymore left. Can anyone give me a hint? Thanks, gijs
On Thu, 13 Oct 2005 10:28:29 +0200 Gijs Molenaar <gijs at looze.net> wrote:> After a couple of hours trying different combinations and checking, I > really have no ideas anymore left. > > > Can anyone give me a hint?My bad, please try the attached fix. -d -------------- next part -------------- A non-text attachment was scrubbed... Name: filterfix.diff Type: application/octet-stream Size: 620 bytes Desc: not available Url : http://lists.mindrot.org/pipermail/netflow-tools/attachments/20051013/070483b2/attachment.obj
Damien Miller schreef:>This still looks like a filter problem. Could you try uncommenting the >"#define FILTER_DEBUG" in filter.c and sending the output? >I did. But where should I look for the output? when i run with -g or -d I don''t see that any change. Something I don''t really understand completely, do you want this discussion to take place on the mailinglist or personal? Sometimes I forget this and press ''reply'', but I''m not the only one :) Thanks for the fast replies and actions! Really, the fastest bug fixes ever. Not working yet, but still, fast. ;)