Missing Log entrys

[Rigobert]

Hi there,

I hope, this is the right section.

One of our customer ist running two Nokia IP560 FW with NGX R62.
The Management Server is a SUN V210 with Solaris 10.

Our problem is the following:
The customer manage his LAN with SFLOW packets (udp 6343).
The packets reaching the SFLOW-Server, but with fw monitor, I can't see them, also they are not in the logfile. With tcpdump, I can see the packets.

Does any body know, why the fw monitor the packets didn't see?
In the FW rule are all connections alowed between the customer LAN and the SFLOW-Server and logging is enabled.
Source=LAN addresses - destination=SFLOW-Server - service=any

Thanks for your help.
Rigobert

Sorry for possibly bad spelling. Feel fre to ask, if something ambiguous.

[melipla]

I would think the problem is with your fw monitor statement. Did you try something like this:

fw monitor -e "accept dport=6343;"