sflowtrend cannot process the received sflow packet.

73 views
Skip to first unread message

qi yu

unread,
Aug 16, 2021, 11:49:44 AM8/16/21
to sFlowTrend
I installed sflowtrend on the centos7.9 server, the firewall has opened 8087/tcp and 6343/udp ports, and the webui can be opened normally, but it always shows Receiving 0 samples/sec. The tcpdump capture packet in the background of the server can be sent by the switch. A large number of sflow packets came, the target port is UDP6343, netstat -l -p -u | grep flow shows udp 0 0 0.0.0.0:sflow 0.0.0.0:* 1089/java, the listening IP set in the system configuration on webui Both the port and the port are correct, but the flow cannot be displayed correctly in webui. There is still a problem, it is really unclear.

sgjohnston

unread,
Aug 16, 2021, 11:55:46 AM8/16/21
to sFlowTrend
What is the make and model of the switch you are using?

Can you collect a short trace of the sFlow you are receiving on the system, using

tcpdump -s 0 -w trace.pcap udp port 6343

Let this run for 5 minutes, then send the trace.pcap file to sflow...@inmon.com. We will take a look at the trace to see if there are any issues with the sFlow. 

qi yu

unread,
Aug 17, 2021, 1:50:27 AM8/17/21
to sFlowTrend
My switch model is Huawei CE6851, I have configured two SFLOW collectors in the switch, and send the same sflow data packet to the two collectors at the same time. The other is also a centos7 system, and the running SFLOW-RT can be analyzed normally. SFLOW data. The problematic collector switched to SFLOW-RT also cannot process the received SFLOW data packets.

The switch configuration is as follows:

dis sflow config
sFlow Version 5
-------------------------------------------------- -----------------------------
Agent IP Address: 172.16.0.7
-------------------------------------------------- -----------------------------
Source IP Address: 172.16.0.7
-------------------------------------------------- -----------------------------
Collector ID: 1
  IP Address: 172.16.1.9
  UDP Port: 6343
  Length: 1400
  Description:-
-------------------------------------------------- -----------------------------
Collector ID: 2
  IP Address: 172.16.1.8
  UDP Port: 6343
  Length: 1400
  Description:-
-------------------------------------------------- -----------------------------
NOTE:
CID:collectorID LEN:length DIR:direction RAT:rate
INT:interval IN :inbound OUT:outbound
HEAD-ONLY:IPv4/IPv6 head length
-------------------------------------------------- -----------------------------
                             Sampling Counter
-------------------------------------------------- ------------------------------
Interface CID LEN DIR RAT CID INT
-------------------------------------------------- ------------------------------
10GE1/0/3 1&2 128 IN 8192 1&2 20
10GE1/0/5 1&2 128 IN 8192 1&2 20
10GE1/0/8 1&2 128 IN 8192 1&2 20
10GE1/0/10 1&2 128 IN 8192 1&2 20
10GE1/0/11 1&2 128 IN 8192 1&2 20
10GE1/0/12 1&2 128 IN 8192 1&2 20
10GE1/0/15 1&2 128 IN 8192 1&2 20
10GE1/0/16 1&2 128 IN 8192 1&2 20
10GE1/0/17 1&2 128 IN 8192 1&2 20
-------------------------------------------------- ------------------------------
Reply all
Reply to author
Forward
0 new messages