Re: [Nfdump-discuss] Error "Skip unknown record type" with sFlow collector
netflow collecting and processing tools
Brought to you by:
phaag
|
From: Peter H. <ph...@us...> - 2011-07-20 08:54:39
|
On 19/7/11 8:16 PM, Italo Valcy wrote: > Hello all, > > I'm using sfcapd to collect flows in sFlow format, but when I try to > query the data (nfcapd.YYYYmmddHHMM) I get the following error: > > Skip unknown record type XX > > I was looking in the mailinglist archieves and could see many people > asking the same question, but I was unable to find the answer. Sorry if > it was my fault. > > I've tried to use sflowtools to convert sFlow to Netflow and forward the > data to nfcapd, and it works fine. So, I guess it can be a kind of bug > with nfdump. > > > Thanks for any help! It's fixed in nfdump-1.6.4. As it was a collector related bug, old files may still be a problem to read. New files are fixed. - Peter > > ------------------------------------------------------------------------------ Magic Quadrant for Content-Aware Data Loss Prevention Research study explores the data loss prevention market. Includes in-depth analysis on the changes within the DLP market, and the criteria used to evaluate the strengths and weaknesses of these DLP solutions. http://www.accelacomm.com/jaw/sfnl/114/51385063/ _______________________________________________ Nfdump-discuss mailing list Nfd...@li... https://lists.sourceforge.net/lists/listinfo/nfdump-discuss -- Be nice to your netflow data. Use NfSen and nfdump :) |