softflowd icon indicating copy to clipboard operation
softflowd copied to clipboard

no probes on/from a bridge interface

Open PetruGarstea opened this issue 4 years ago • 3 comments

Greetings,

FreeBSD12.1 softflowd-1.0.0

Diagram:

epairA - epairB | bridge0 | vlan0

case 1: softflowd listens bridge0 interface and doesnt send or show any flows to the analyzer.

case2: softflowd listens vlan0 interface, there are flows except flows that are originating via bridge0 interface.

I believe that is OS kernel specifics because I am getting the same results with ng_netflow, however I am wondering if that can be sorted out.

Cheers, Petru

PetruGarstea avatar Oct 06 '20 03:10 PetruGarstea

vlan id 0 aka 0x000 and vlan id 4095 aka 0xfff are reserved vlan ids. Seems it isn't legal to use it on trunk ports or bridge interfaces. With normal vlans in bridge interface all works fine.

sfd

Yep. softflowd-0.9.9_1 and FreeBSD 12.1-RELEASE

nightflyza avatar May 12 '21 16:05 nightflyza

actually, I have to mention that in my case vlan0 is the name of the interface with vlan id 10

PetruGarstea avatar May 13 '21 16:05 PetruGarstea

@nightflyza ok, I have spent more time on configuration and data analysis validation and concluded that softflowd works fine.

Cheers

PetruGarstea avatar Jun 05 '21 05:06 PetruGarstea