softflowd
softflowd copied to clipboard
no probes on/from a bridge interface
Greetings,
FreeBSD12.1 softflowd-1.0.0
Diagram:
epairA - epairB | bridge0 | vlan0
case 1: softflowd listens bridge0 interface and doesnt send or show any flows to the analyzer.
case2: softflowd listens vlan0 interface, there are flows except flows that are originating via bridge0 interface.
I believe that is OS kernel specifics because I am getting the same results with ng_netflow, however I am wondering if that can be sorted out.
Cheers, Petru
vlan id 0 aka 0x000 and vlan id 4095 aka 0xfff are reserved vlan ids. Seems it isn't legal to use it on trunk ports or bridge interfaces. With normal vlans in bridge interface all works fine.
Yep. softflowd-0.9.9_1 and FreeBSD 12.1-RELEASE
actually, I have to mention that in my case vlan0 is the name of the interface with vlan id 10
@nightflyza ok, I have spent more time on configuration and data analysis validation and concluded that softflowd works fine.
Cheers