Re: [Nfdump-discuss] netflow v9 & nfcapd
netflow collecting and processing tools
Brought to you by:
phaag
From: Kimaru M. <ki...@gm...> - 2012-01-19 18:31:33
|
It would probably help if you could provide some kind of pcap of the information received on the NIC of the collector. Also, you mentioned that this didn't occur before, what was the config before your change ? And, is that all your config related to the netflow export on the router ? On Fri, Jan 13, 2012 at 3:56 PM, Jean-Marc Têtu <jm...@te... > wrote: > ** > Hello! > > First: sorry for my very bad english.... > > Second: maybe one have like me theses errors? > > Jan 13 15:16:44 nfsen-server nfcapd[23704]: Process_v9: Corrupt data > flowset? Pad bytes: 6 > Jan 13 15:16:44 nfsen-server nfcapd[23704]: Process_v9: Corrupt data > flowset? Pad bytes: 12 > Jan 13 15:16:44 nfsen-server nfcapd[23704]: Process_v9: Corrupt data > flowset? Pad bytes: 12 > Jan 13 15:16:45 nfsen-server nfcapd[23704]: Process_v9: Corrupt data > flowset? Pad bytes: 22 > Jan 13 15:16:45 nfsen-server nfcapd[23704]: Process_v9: Corrupt data > flowset? Pad bytes: 14 > Jan 13 15:16:45 nfsen-server nfcapd[23704]: Process_v9: Corrupt data > flowset? Pad bytes: 12 > > > I upgrade the IOS version on a CISCO router ( IOS-XE Software (...), > Version *15.2(1)S* ). > > (In the router config : > > ip nat log translations flow-export v9 udp destination ip_nfsen_server > 2055) > > And since (before, no problem) we have theses lines in /var/log/messages > (on CentOS release 5.3). > > Jan 13 15:16:45 nfsen-server nfcapd[23704]: Process_v9: Corrupt data > flowset? Pad bytes: 12 > > > To correct the problem i try n versions of nfdump (nfdump-1.5.8-2-NSEL > nfdump-1.6.3p1 nfdump-1.6.5). Without result..... > > Where is my error ? > > Thanks if somebody have an idea..... > > JMT > > > > ------------------------------------------------------------------------------ > RSA(R) Conference 2012 > Mar 27 - Feb 2 > Save $400 by Jan. 27 > Register now! > http://p.sf.net/sfu/rsa-sfdev2dev2 > _______________________________________________ > Nfdump-discuss mailing list > Nfd...@li... > https://lists.sourceforge.net/lists/listinfo/nfdump-discuss > > |