host-sflow
host-sflow copied to clipboard
FreeBsd Pcap conf error
I am trying to generate some sflow from my FreeBSD network interface(rl0), Im trying to use hsflow to send it to my collector (sflowtool) .... I always get zeroed data in my collector, so I thought it would be necessary to activate PCAP to send data from my interface...
First I compiled using ports:
/usr/ports/net/hsflowd # make FEATURES="PCAP" #make install #make clean
I try run hsflow using this conf in FreeBSD:
sflow{ DNSSD = off polling =5 sampling = 512 collector{ ip = X.X.X.X udpport = 6343 } pcap { dev = rl0 } }
When I run in debug mode:
#hsflowd -ddd
I get this error:
parse error at <pcap><{> on line 17 of /usr/local/etc/hsflowd/hsflowd.conf : unexpected sFlow setting
Can help ?
OBS: sflowtool currently works normally receiving Flows from my switches
The FreeBSD port is very old an incomplete. It does not have a packet-sampling module. The Linux port is the only one that has seen recent development. I don't have a sense for how hard/easy it might be to port to FreeBSD (again).
There is a multitude of issues working under FreeBSD. I have some vested interest in making this work. What may be an interim solution for you @ederwander is to install open vswitch, and use its imbeded support to send sflow data.