Re: [Nfdump-discuss] nfdump -b -w

[Peter H. <ph...@us...>]

Hi,

On 02.05.14 04:47, sha...@gm... wrote:
> With version 1.6.12, when I write back to a file with the aggregate options with nfdump, I cannot read back the records again.
> This only happens when the -b or -a or -A are used. Without any of these options, it works. This is with NetFlow v9.
> 
> The DEVEL enabled debug printf seems to indicate that the extension map was saved in output file.
> However on subsequent read of the file, it appears not to find the extension records.
> 
> Any help in debugging this would be appreciated.
> 
> Shankar
> 
> nfdump -r captures -b -w output

I suspect you have an older ( pre 1.6.12 nfdump binary running ). If all binaries are properly replaced when you install
1.6.12, it work as expected. Even if the capture was pre 1.6.12.

	- Peter

> 
> nfdump -r output
> 
> Corrupt data file. Missing extension map 0. Skip record.
> 
> Corrupt data file. Missing extension map 0. Skip record.
> 
> Corrupt data file. Missing extension map 0. Skip record.
> 
> Corrupt data file. Missing extension map 0. Skip record.
> 
> Corrupt data file. Missing extension map 0. Skip record.
> 
> Corrupt data file. Missing extension map 0. Skip record.
> 
> Corrupt data file. Missing extension map 0. Skip record.
> 
> 
> 
> 
> 
> 
> ------------------------------------------------------------------------------
> "Accelerate Dev Cycles with Automated Cross-Browser Testing - For FREE
> Instantly run your Selenium tests across 300+ browser/OS combos.  Get 
> unparalleled scalability from the best Selenium testing platform available.
> Simple to use. Nothing to install. Get started now for free."
> http://p.sf.net/sfu/SauceLabs
> 
> 
> 
> _______________________________________________
> Nfdump-discuss mailing list
> Nfd...@li...
> https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
> 

-- 
Be nice to your netflow data. Use NfSen and nfdump :)