OPNsense Forum

Archive => 17.7 Legacy Series => Topic started by: xupetas on November 07, 2017, 05:24:53 pm

Title: Netflow not working as expected
Post by: xupetas on November 07, 2017, 05:24:53 pm
Hello all,

I've been trying to get my netflow working with my Argus (https://qosient.com/argus/) accounting server with no luck.
My configuration is as showned on attach1.png

If i look inside the firewall, there is indeed a process that i suspect that is the flow analyser:

# 0:00.01 /usr/local/bin/samplicate -s 127.0.0.1 -p 2055 172.16.0.155/9666

I have checked and there is a very slow of data being put my the firewall on my argus accounting server.
I have other softflow devices that are recording data correctly with this configuration.
The same for radium/argus native client.

One issue that i've found is that usual netflow network packets (at least the kind that i am used to) are much smaller that thoose produced by the netflow engine of opnsense: opn packets - 1506 bytes versus usual packets 120 to 280 bytes.

What am i missing here?

Thanks for your product and your help!