[netsa-tools-discuss] Fwd: RWFLOWPACK error but still process ipfix
    Joseph West 
    josephwestlinux at gmail.com
       
    Sun May 13 16:08:06 EDT 2018
    
    
  
Hello,
My rwflowpack log states this message multiple times:
rwflowpack[13] Cannot determine flowtype of record from probe S0E: input 3;
output 3.
I believe my sensor.conf is misconfigured. How do I find the correct SMTP
external ports?
sensor.conf:
probe S0E ipfix
   listen on {port hidden for security}
   protocol tcp
end probe
sensor S0E
   ipfix-probes S0E
   external-interface 0,2,257,259
   internal-interfaces 1,3,256,258
end sensor
-------------- next part --------------
HTML attachment scrubbed and removed
    
    
More information about the netsa-tools-discuss
mailing list