OPNsense Forum

English Forums => 25.1, 25.4 Production Series => Topic started by: rfox on February 13, 2025, 11:15:45 AM

Title: netflow strangeness - 25.1.1 running in Proxmox - ksocket_netflow
Post by: rfox on February 13, 2025, 11:15:45 AM
Not sure these are related - just trying to understand the console output showing netmap_transit messages (see first screenshot) and the lack of data in netflow cache (see screenshot #2) showing ksocket_netflow_vtnetX for various node devices - yet showing no pkts or data ?!?

I've searched around but not found any decent references - any hints welcome!

root@FoxOPN:/home/rfox # ngctl list
There are 16 total nodes:
  Name: vtnet0          Type: ether           ID: 00000002   Num hooks: 2
  Name: vtnet1          Type: ether           ID: 00000003   Num hooks: 2
  Name: vtnet2          Type: ether           ID: 00000004   Num hooks: 2
  Name: vtnet3          Type: ether           ID: 00000005   Num hooks: 2
  Name: vtnet4          Type: ether           ID: 00000006   Num hooks: 2
  Name: netflow_vtnet3  Type: netflow         ID: 00000009   Num hooks: 3
  Name: ksocket_netflow_vtnet3 Type: ksocket         ID: 0000000f   Num hooks: 1
  Name: netflow_vtnet2  Type: netflow         ID: 00000014   Num hooks: 3
  Name: ngctl25640      Type: socket          ID: 00000058   Num hooks: 0
  Name: ksocket_netflow_vtnet2 Type: ksocket         ID: 0000001a   Num hooks: 1
  Name: netflow_vtnet0  Type: netflow         ID: 0000001f   Num hooks: 3
  Name: ksocket_netflow_vtnet0 Type: ksocket         ID: 00000025   Num hooks: 1
  Name: netflow_vtnet4  Type: netflow         ID: 0000002a   Num hooks: 3
  Name: ksocket_netflow_vtnet4 Type: ksocket         ID: 00000030   Num hooks: 1
  Name: netflow_vtnet1  Type: netflow         ID: 00000035   Num hooks: 3
  Name: ksocket_netflow_vtnet1 Type: ksocket         ID: 0000003b   Num hooks: 1
Title: Re: netflow strangeness - 25.1.1 running in Proxmox - ksocket_netflow
Post by: koushun on April 17, 2025, 01:15:40 AM
OPNSense > Netflow > external destination, Telegraf on a device with inputs.netflow configured-- output is Influxdb, but I do not see *any* data, data, in the bucket.

The bucket is being written to, but that is only Netflow type of stuff?

Not exactly what I am after (I want to have the same in influxdb visualized in Grafana), but there is no metadata coming in. I am very puzzled. It throws an error in the beginning, missing template-- but that stop after a while.

However, there is no actual metadata flowing in.