[ixpmanager] Fw:peer-to-peer statistics | sFlow

[Nick Hilliard (INEX)]

Hi Jennifer

sflow-to-rrd-handler needs to be able to match up the VLAN with the MAC 
address, according to what is configured in the Configured-MAC 
database.  If it can't match these up, it will set the source and 
destination VLAN interface ID (srcvli / dstvli) to be 0, and that will 
cause the sflow record to be dropped.  This means that all the counters 
in the RRD archive will be set to zero.

The output from sflowtool is showing multiple separate VLANs with IDs 
2810, 3005, 1516, 1702, 205, and vlan 1, with different src and 
destination vlans. Probably this is what is causing sflow-to-rrd-handler 
to be unable to work out what ports / vlans are being used.

Nick

> jennifer xue <mailto:yabuqi_0905 at 163.com>
> 22 May 2019 at 09:22
> Hello team,
> I'm the newbie one regarding IXP Manager:
> I'm trying to get peer-to-peer statistics and need help in that;
> To be short: VM is CentOS 7
> Installed via manual
> PHP 7.3.2
> the SW is the physical one.
>
> The switch is being detected via SNMP, port states are OK.
> sFlow is configured on SW: I can tcpdump it on VM, traffic is comming;
> (the same VM as IXP manager is installed on); I mean collector will be 
> the same VM where IXP Manager is installed on.
>
> but the output of rrdtool dump like is:
> ├── ipv4
> │   ├── bytes
> │   │   ├── aggregate
> │ │   │   ├── aggregate.ipv4.bytes.vlan00005.rrd
> │   │   │   └── aggregate.ipv4.bytes.vlan00249.rrd
> │   │   └── individual
> │   │ └── individual.ipv4.bytes.src-00003.rrd
> │   └── pkts
> │ ├── aggregate
> │   │   ├── aggregate.ipv4.pkts.vlan00005.rrd
> │ │   └── aggregate.ipv4.pkts.vlan00249.rrd
> │   └── individual
> │ └── individual.ipv4.pkts.src-00003.rrd
> ├── ipv6
> │   ├── bytes
> │   │   ├── aggregate
> │   │   │   ├── aggregate.ipv6.bytes.vlan00005.rrd
> │   │   │   └── aggregate.ipv6.bytes.vlan00249.rrd
> │   │   └── individual
> │   │ └── individual.ipv6.bytes.src-00003.rrd
> │   └── pkts
> │ ├── aggregate
> │   │   ├── aggregate.ipv6.pkts.vlan00005.rrd
> │ │   └── aggregate.ipv6.pkts.vlan00249.rrd
> │   └── individual
> │ └── individual.ipv6.pkts.src-00003.rrd
> the content of file is :
> <rra>
> <cf>AVERAGE</cf>
> <pdp_per_row>1</pdp_per_row> <!-- 300 seconds -->
>
> <params>
> <xff>5.0000000000e-01</xff>
> </params>
> <cdp_prep>
> <ds>
> <primary_value>0.0000000000e+00</primary_value>
> <secondary_value>NaN</secondary_value>
> <value>NaN</value>
> <unknown_datapoints>0</unknown_datapoints>
> </ds>
> <ds>
> <primary_value>0.0000000000e+00</primary_value>
> <secondary_value>NaN</secondary_value>
> <value>NaN</value>
> <unknown_datapoints>0</unknown_datapoints>
> </ds>
> </cdp_prep>
> <database>
> <!-- 2019-05-18 09:10:00 CST / 1558141800 --> 
> <row><v>NaN</v><v>NaN</v></row>
> <!-- 2019-05-18 09:15:00 CST / 1558142100 --> 
> <row><v>NaN</v><v>NaN</v></row>
> <!-- 2019-05-18 09:20:00 CST / 1558142400 --> 
> <row><v>NaN</v><v>NaN</v></row>
> <!-- 2019-05-18 09:25:00 CST / 1558142700 --> 
> <row><v>NaN</v><v>NaN</v></row>
> <!-- 2019-05-18 09:30:00 CST / 1558143000 --> 
> <row><v>NaN</v><v>NaN</v></row>
> <!-- 2019-05-18 09:35:00 CST / 1558143300 --> 
> <row><v>NaN</v><v>NaN</v></row>
> ……
>
> And the output of sflowtool is :
> FLOW,106.48.32.32,837,967,0007586fa14d,70096d41fe99,0x0800,2810,3005,108.12.26.71,42.62.101.14,6,0x00,56,443,50248,0x10,1522,1500,2048
> FLOW,106.48.32.32,912,970,d004ff2107c5,900374f5e219,0x0800,1516,1702,128.228.93.219,103.208.15.238,6,0x00,61,80,50295,0x10,1518,1496,2048
>
> however,the output of "sflow-to-rrd-handler --macdbtype=configured 
> --debug" is:
> DEBUG: dropped update for: protocol: 4 vlan: 205 srcvli: 0 dstvli: 0 
> pktsize: 1522 samplerate: 2048
> DEBUG: rejected: 
> FLOW,106.48.32.32,903,1,100080acbb6e,f4007f99abe9,0x0800,205,1,223.202.84.225,47.110.33.18,6,0x00,59,443,63334,0x10,1522,1500,2048
> DEBUG: dropped update for: protocol: 4 vlan: 1516 srcvli: 0 dstvli: 0 
> pktsize: 1362 samplerate: 2048
> DEBUG: rejected: 
> FLOW,106.48.32.32,912,970,d400ff2107c5,9c0074f5e219,0x0800,1516,1702,122.228.93.219,43.254.90.120,6,0x00,61,80,33968,0x10,1362,1340,2048
>
> 1、There is no p2p file like "p2p.ipv4.bytes.src-00001.dst-00003.rrd" 
> been made;
> 2、output of sflow-to-rrd-handler is correct?? cannot find "accepted" 
> word.
>
>
>
>
> Best Regards！
>
>
>
>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://www.inex.ie/pipermail/ixpmanager/attachments/20190522/22c52a07/attachment.html>