host-sflow icon indicating copy to clipboard operation
host-sflow copied to clipboard

FreeBsd Pcap conf error

Open ederwander opened this issue 10 months ago • 2 comments

I am trying to generate some sflow from my FreeBSD network interface(rl0), Im trying to use hsflow to send it to my collector (sflowtool) .... I always get zeroed data in my collector, so I thought it would be necessary to activate PCAP to send data from my interface...

First I compiled using ports:

/usr/ports/net/hsflowd # make FEATURES="PCAP" #make install #make clean

I try run hsflow using this conf in FreeBSD:

sflow{ DNSSD = off polling =5 sampling = 512 collector{ ip = X.X.X.X udpport = 6343 } pcap { dev = rl0 } }

When I run in debug mode:

#hsflowd -ddd

I get this error:

parse error at <pcap><{> on line 17 of /usr/local/etc/hsflowd/hsflowd.conf : unexpected sFlow setting

Can help ?

OBS: sflowtool currently works normally receiving Flows from my switches

ederwander avatar Aug 16 '23 18:08 ederwander

The FreeBSD port is very old an incomplete. It does not have a packet-sampling module. The Linux port is the only one that has seen recent development. I don't have a sense for how hard/easy it might be to port to FreeBSD (again).

sflow avatar Aug 16 '23 19:08 sflow

There is a multitude of issues working under FreeBSD. I have some vested interest in making this work. What may be an interim solution for you @ederwander is to install open vswitch, and use its imbeded support to send sflow data.

dBitech avatar Nov 22 '23 20:11 dBitech