[netsa-tools-discuss] RWFLOWPACK error but still process ipfix

Joseph West josephwestlinux at gmail.com
Sat May 12 18:38:10 EDT 2018


Hello,

My rwflowpack log states this message multiple times:

rwflowpack[13] Cannot determine flowtype of record from probe S0E: input 3;
output 3.


I believe my sensor.conf is misconfigured. How do I find the correct SMTP
external ports?

sensor.conf:
probe S0E ipfix
   listen on {port hidden for security}
   protocol tcp
end probe

sensor S0E
   ipfix-probes S0E
   external-interface 0,2,257,259
   internal-interfaces 1,3,256,258
end sensor
-------------- next part --------------
HTML attachment scrubbed and removed


More information about the netsa-tools-discuss mailing list