Sorry for the spam if this is a repeat question.
I am trying to export netflow from vyos to elastiflow but not getting any success.
The Vyos version is Version: VyOS 1.4-rolling-202206180736
The flow-accounting config is as below
vyos@vyos-pghome:~$ show configuration commands | match flow
set system flow-accounting buffer-size '64'
set system flow-accounting disable-imt
set system flow-accounting interface 'eth2'
set system flow-accounting interface 'eth3'
set system flow-accounting netflow max-flows '640000'
set system flow-accounting netflow server 10.33.44.210 port '9995'
set system flow-accounting netflow source-address '10.33.44.254'
set system flow-accounting netflow timeout expiry-interval '30'
set system flow-accounting netflow timeout flow-generic '3600'
set system flow-accounting netflow timeout icmp '300'
set system flow-accounting netflow timeout max-active-life '604800'
set system flow-accounting netflow timeout tcp-fin '300'
set system flow-accounting netflow timeout tcp-generic '3600'
set system flow-accounting netflow timeout tcp-rst '120'
set system flow-accounting netflow timeout udp '300'
set system flow-accounting netflow version '5'
I get error when I try to run show flow-accounting
vyos@vyos-pghome:~$ show flow-accounting
Traceback (most recent call last):
File "/usr/libexec/vyos/op_mode/flow_accounting_op.py", line 244, in <module>
flows_list = _get_flows_list()
File "/usr/libexec/vyos/op_mode/flow_accounting_op.py", line 97, in _get_flows_list
out = cmd(f'/usr/bin/pmacct -s -O json -T flows -p {uacctd_pipefile}',
File "/usr/lib/python3/dist-packages/vyos/util.py", line 161, in cmd
raise OSError(code, feedback)
PermissionError: [Errno 1] Failed to get flows list
failed to run command: /usr/bin/pmacct -s -O json -T flows -p /tmp/uacctd.pipe
returned: INFO: Connection refused while trying to connect to '/tmp/uacctd.pipe'
exit code: 1
But I do get some output on tcpdump
root@elastiflow:~# tcpdump -nnei eth0 port 9995 -vvvv
tcpdump: listening on eth0, link-type EN10MB (Ethernet), snapshot length 262144 bytes
20:03:00.476190 40:62:31:12:7e:86 > ee:82:a8:fe:c0:f5, ethertype IPv4 (0x0800), length 1458: (tos 0x0, ttl 64, id 56636, offset 0, flags [DF], proto UDP (17), length 1444)
10.33.44.254.36682 > 10.33.44.210.9995: [udp sum ok] UDP, length 1416
20:03:00.476193 40:62:31:12:7e:86 > ee:82:a8:fe:c0:f5, ethertype IPv4 (0x0800), length 786: (tos 0x0, ttl 64, id 56637, offset 0, flags [DF], proto UDP (17), length 772)
10.33.44.254.36682 > 10.33.44.210.9995: [udp sum ok] UDP, length 744
20:03:31.725546 40:62:31:12:7e:86 > ee:82:a8:fe:c0:f5, ethertype IPv4 (0x0800), length 1458: (tos 0x0, ttl 64, id 56638, offset 0, flags [DF], proto UDP (17), length 1444)
10.33.44.254.36682 > 10.33.44.210.9995: [udp sum ok] UDP, length 1416
20:03:31.725548 40:62:31:12:7e:86 > ee:82:a8:fe:c0:f5, ethertype IPv4 (0x0800), length 306: (tos 0x0, ttl 64, id 56639, offset 0, flags [DF], proto UDP (17), length 292)
10.33.44.254.36682 > 10.33.44.210.9995: [udp sum ok] UDP, length 264
The elastiflow is a fresh install using documentation on its website