Hsflowd with PRTG

[Machi Ma]

Hello,

I have a question about hsflowd.  Not sure is it allow me to post here.  If not, please let me know and delete those message.

Question which I have now is PRTG (sflow collector) cannot accept the Hsflowd format.  I have tried to adjust the configuration but still no luck.

 Using sflowtools to convert sflow packet and sent to PRTG support.  They say I should check

sampleType COUNTERSSAMPLE

I have uploaded the capture for here for reference and following is hsflowd.conf.


sflow {
      polling = 30
      sampling.1G = 1000
      sampling.10G = 10000
      sampling = 512
      agentIP=192.168.10.205
      collector {
        ip = 192.168.10.4
        udpport = 6373
        }
}

Could you please assistant to check and how should fix it?

Thanks in advance.

[Peter Phaal]

On Wed, Nov 16, 2016 at 8:50 PM, Machi Ma <machia...@gmail.com> wrote:
> Question which I have now is PRTG (sflow collector) cannot accept the
> Hsflowd format. I have tried to adjust the configuration but still no luck.
>
> Using sflowtools to convert sflow packet and sent to PRTG support. They
> say I should check
>
> sampleType COUNTERSSAMPLE
>
> I have uploaded the capture for here for reference and following is
> hsflowd.conf.
>
>
> sflow {
> polling = 30
> sampling.1G = 1000
> sampling.10G = 10000
> sampling = 512
> agentIP=192.168.10.205
> collector {
> ip = 192.168.10.4
> udpport = 6373
> }
> }
>
> Could you please assistant to check and how should fix it?

PRTG is probably expecting packet sampled. You need to enable one the
the traffic monitoring methods (pcap, ovs, netfilter/nflog, etc.).

http://www.sflow.net/host-sflow-linux-config.php

The simplest method is to use the pcap module, e.g. add the following
line to your config to monitor traffic in/out eth0:

pcap { dev=eth0 }

[Machi Ma]

Hello Peter,

Thanks for still no luck.

Still could not capture and still find from capture

'sampleType COUNTERSSAMPLE'

I could see libpcap0.8 is already installed.  Any further idea?

Thanks!


Machi Ma於 2016年11月17日星期四 UTC+8下午12時50分37秒寫道：