[dsc] Duplicate packets captured

Anand Buddhdev anandb at ripe.net
Tue Jul 9 16:16:56 UTC 2013


On 09/07/2013 17:00, Anand Buddhdev wrote:

> Hello DSC users,
> 
> We've noticed a strange issue with our DSC installation. We have a
> CentOS 6 server, with libpcap 1.0.0 (part of the base CentOS
> installation). We run multiple collectors, with configurations like these:
> 
> interface eth0;
> local_address 193.0.9.X;
> local_address 2001:67c:e0::X;
> bpf_program "host 193.0.9.X or host 2001:67c:e0::X";
> run_dir "/export/dsc/data.X";
> pid_file "/var/run/dsc.X.pid";
> minfree_bytes 5000000;

I hate to answer my own question, but upon further investigation, I
found the issue. The DSC sample configuration file clearly says that the
interface option must go *after* the bpf_program. Changing the order
around has eliminated the duplicates, and the graphs now look normal again.

Apologies for the noise :(

Regards,

Anand



More information about the dsc mailing list