On 06/06/14 17:36, Philip Homburg wrote:
Hi,
On 2014/06/06 17:23 , john wrote:
Quick question about the data format. What would cause a measurement to have an empty from field but contain data? An example would be probe_id 13663 from measurement 1672218[1]. A cursory glance seems to happens a lot more with V6
The 'from' field is the address of the probe as recorded by the controller (as opposed to what the probe reports itself as 'src_addr').
The controller takes it from the ssh connection. A probe that has both v4 and v6 tries to initiate two ssh connections, one over v4 and one over v6. If one of them fails, then it is possible that the probe connects but the controller doesn't know the IP address of the one that fails. Thanks for the explanation. would it be possible to also expos the src_addr through sagan?
Thanks John