Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 9 Oct 2009 12:10:36 -0500
From:      Jay Hall <jhall@socket.net>
To:        freebsd-questions@freebsd.org
Subject:   Capturing netflows
Message-ID:  <E54EF7EC-1E28-4DA5-8BE0-70FA5F51C55D@socket.net>

next in thread | raw e-mail | index | archive | help
I have run into a need to capture netflows from the internal interface  
of my FreeBSD 6 server.  The internal interface is em0 and the  
external interface is em1.

I am using the following to setup the netflows.

/usr/sbin/ngctl -f- << SEQ
	mkpeer em0: netflow lower iface0
	name: em0: lower netflow
	connect em0: netflow: upper out0
	mkpeer netflow: ksocket export inet/dgram/udp
	msg netflow:export connect inet/1.2.3.4:12345
SEQ

When I run the commands above, I receive the following message.

ngctl: send msg: No such file or directory
ngctl: line 1: error in file

I am at a complete loss here.  My understanding of netgraph is poor at  
best.  Any suggestions would be appreciated.

Thanks,

Jay



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?E54EF7EC-1E28-4DA5-8BE0-70FA5F51C55D>