Collector Troubleshooting
If you configure a sensor to send data to your collector but flow-capture isn't generating any log files within a few minutes, start troubleshooting. Either the sensor is not transmitting data, flow-capture is not writing the data to disk, or a firewall between the sensor and collector is blocking that port.
To begin troubleshooting, first verify that sensor data is reaching your collector with tcpdump in order to separate network problems from local software problems.
# tcpdump -p -n -i em0 udp and port 5678The -p tells tcpdump to not put the interface into promiscuous mode. This means that the system will only sniff traffic that reaches the local interface. (A proper switch configuration should prevent promiscuous-mode ...
Get Network Flow Analysis now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
