fastnetmon flow tracking

[Вячеслав]

Hello Павел!

Please tell me the commands to enable tracking by flows.

Capture engines is SPAN AF_PACKET

rp_filter is disable:
sysctl -a | grep ".rp_filter"
net.ipv4.conf.all.arp_filter = 0
net.ipv4.conf.all.rp_filter = 0
net.ipv4.conf.bond0.arp_filter = 0
net.ipv4.conf.bond0.rp_filter = 0
net.ipv4.conf.default.arp_filter = 0
net.ipv4.conf.default.rp_filter = 0
net.ipv4.conf.eno1.arp_filter = 0
net.ipv4.conf.eno1.rp_filter = 0
net.ipv4.conf.enp0s25.arp_filter = 0
net.ipv4.conf.enp0s25.rp_filter = 0
net.ipv4.conf.enp2s0f0.arp_filter = 0
net.ipv4.conf.enp2s0f0.rp_filter = 0
net.ipv4.conf.enp2s0f1.arp_filter = 0
net.ipv4.conf.enp2s0f1.rp_filter = 0
net.ipv4.conf.enp2s0f2.arp_filter = 0
net.ipv4.conf.enp2s0f2.rp_filter = 0
net.ipv4.conf.enp2s0f3.arp_filter = 0
net.ipv4.conf.enp2s0f3.rp_filter = 0
net.ipv4.conf.lo.arp_filter = 0
net.ipv4.conf.lo.rp_filter = 0

But flows/s is 0

fcli show host_counters
XXX.242.58.11       54223 pps 356 mbps 0 flows/s
XXX.242.59.6        25578 pps 171 mbps 0 flows/s
XXX.150.198.118    12617 pps 104 mbps 0 flows/s
XXX.166.247.245     10328 pps 80 mbps 0 flows/s
XXX.166.243.100     4217 pps 48 mbps 0 flows/s
XXX.166.241.250     7848 pps 46 mbps 0 flows/s
XXX.166.224.82      3885 pps 40 mbps 0 flows/s
XXX.166.229.30      4254 pps 40 mbps 0 flows/s
XXX.166.241.232     6773 pps 39 mbps 0 flows/s
XXX.166.228.102     5504 pps 38 mbps 0 flows/s

Vyacheslav Tolstopyatov
Company:  Dilmax Corp.

[Вячеслав]

Thanks Павел.

It works!

Vyacheslav Tolstopyatov
Company:  Dilmax Corp.

On Wed, Oct 28, 2020 at 4:16 PM Pavel Odintsov <pavel.o...@gmail.com> wrote:

Hello!

Thank you for query!

You can do it this way:

sudo fcli set main enable_connection_tracking enable

sudo fcli commit

As customer of Advanced edition you can use our priority support channel via: sup...@fastnetmon.zendesk.com

--
Follow us on social media: Twitter: https://twitter.com/fastnetmon | Facebook: https://www.facebook.com/fastnetmon/ | LinkedIn: https://www.linkedin.com/company/fastnetmon/
---
You received this message because you are subscribed to the Google Groups "FastNetMon user group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to fastnetmon+...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/fastnetmon/CADEiHa1fx_kG45SVzO3Q-Z-U9-b3Ev-u0RdV5NL-z2oXhaL6DA%40mail.gmail.com.

--

Sincerely yours, Pavel Odintsov