Multiple flows in flowview

[terriz]

I can currently view data from one device using the flowview plugin. The issue I have is when I try to add a second capture to my flow-capture file in /etc/sysconfig. The OS is CentOS 6.

Contents of /etc/sysconfig/flow-capture

Code: Select all

# Change the source IP and port to what is used on your network
OPTIONS="-n 287 -N 0 -w /var/flow-tools/router1 -S 5 0/10.10.1.25/2055"

Is it possible to add more than one device in the OPTIONS variable or do I need to re-script it?

[kdsmith]

Mine looks like this:

-V 5 -E 3G -N 3 -w /var/netflow/flows/Router 0.0.0.0/10.16.1.1/2005

I don't have the "Options=" thing going on. I am running Debian. I always assumed a second line similar to that, but with a different directory and IP would work, but I've never had the need to test that.

Kevin

[terriz]

I have managed to get multiple flows collecting at the same time. The issue I still have is I am unable to see any flow reports using the flowview plugin unless the flow files are located in the default flow-tools directory which is /var/flow-tools. The directories I have the data collecting in are router1 and router2 under that base directory.

From what I understand of the plugin you only need to add that additional directory name when configuring the listener. Is that correct or does it need to be entered another way?

[terriz]

I did resolve the issue. I had to change the nesting level to / for it to view the data.

[Nautics]

I have managed to get multiple flows collecting at the same time.

Once I restart flow-capture, it only binds the fist listener in the list.

How did you get multiple listeners working?