Hi all,
I’m currently running 1.3-rolling-202012220217 on three nodes with the following flow-accounting config:
set system flow-accounting disable-imt
set system flow-accounting enable-egress
set system flow-accounting interface 'eth0'
set system flow-accounting netflow sampling-rate '100'
set system flow-accounting netflow server 10.0.7.125 port '4739'
set system flow-accounting netflow source-ip '10.1.1.3'
set system flow-accounting netflow timeout expiry-interval '60'
set system flow-accounting netflow version '10'
set system flow-accounting sflow agent-address '10.1.1.3'
set system flow-accounting sflow sampling-rate '100'
set system flow-accounting sflow server 10.0.7.124
This works fine for a while, but tonight at around 2:10 am the netflow Probe Plugin died on all three routers simultaneously. I didn’t catch any errors in the logs, and the service didn’t restart either, the netflow plugin just died:
user@r1:~$ sudo service uacctd status
● uacctd.service - ulog accounting
Loaded: loaded (/lib/systemd/system/uacctd.service; disabled; vendor preset: enabled
Active: active (running) since Wed 2020-12-23 17:51:20 UTC; 4 days
Process: 2484 ExecStart=/usr/sbin/uacctd -f ${UACCTD_CONF} $DAEMON_OPTS (code=exited, status=0/SUCCESS)
Main PID: 2486 (uacctd)
Tasks: 2 (limit: 4915)
Memory: 24.0M
CGroup: /system.slice/uacctd.service
├─2486 uacctd: Core Process [default]
└─2491 uacctd: sFlow Probe Plugin [sf_10.0.7.124]
Warning: Journal has been rotated since unit was started. Log output is incomplete or unavailable.
Restarting uacctd fixes it temporarily:
user@r1:~$ sudo service uacctd restart
user@r1:~$ sudo service uacctd status
● uacctd.service - ulog accounting daemon
Loaded: loaded (/lib/systemd/system/uacctd.service; disabled; vendor preset: enabled)
Active: active (running) since Mon 2020-12-28 13:24:36 UTC; 1s ago
Process: 20709 ExecStart=/usr/sbin/uacctd -f ${UACCTD_CONF} $DAEMON_OPTS (code=exited, status=0/SUCCESS)
Main PID: 20710 (uacctd)
Tasks: 3 (limit: 4915)
Memory: 23.8M
CGroup: /system.slice/uacctd.service
├─20710 uacctd: Core Process [default]
├─20711 uacctd: Netflow Probe Plugin [nf_10.0.7.125]
└─20712 uacctd: sFlow Probe Plugin [sf_10.0.7.124]
Just throwing this out here, maybe someone has an idea what causes it. I’ll see if it happens again, and if so I hope I can catch some logs