Number of sources limit in nfcapd

[vmanju123]

Is there a way to set number of incoming devices netflow limit in nfcapd, we have a situation where there are 400+ devices sending netflow to same flow collector running nfcapd and it seems to be crashing and unable to parse the output

[phaag]

No - nfcapd collects whatever it receives regardless of the number of devices and should not crash.
What OS/version/CPU are you running?

• Make sure you run a decent version of nfdump (1.7.6 or greater)
• Make sure you have no system limits set, which would the kernel trigger to kill the process.
• Check the syslog files in order to get traces of a crash

If you want to limit the devices, use a system based IP firewall on the collector side.
If you can reproduce the crash on the latest GitHub master version, send me a core dump or let the collector run in gdb (or lldb) until it crashes - then run bt and send me the output.