I’m using a Mikrotek-Router (RouterOS 4.1) and want to record the traffic-usage by using netflow. (Version 9)
ADDRESS VERSION
0 192.168.0.119:9995 9
For testing usage I added a interface of a common Netbook with Ubuntu 10.04, which is directly connected. On this Netbook I installed NFDumpd and NFCapd. NFCapd is receiving all NetFlow Packages and works well. I used following command:
nfcapd -z -w 5 -T all -l /var/trafficmon / -I any -S1 -P /var/run/nfcapd.pid
So far so good. After that I read the records by typing:
nfdump -R /var/trafficmon -o fmt:“%byt — %ibyt / %obyt”
But it seems that outgoing traffic was not recorded. It’s always zero. The Field “Total Bytes” is also equal with “Inbound Bytes”. I don’t thinkt, that there is a problem with the nfcapd-Daemon.