Re: [Nfdump-discuss] nfdump -b -w

[Frank T. <th...@un...>]

sha...@gm... (sha...@gm...) wrote:
> With version 1.6.12, when I write back to a file with the aggregate
> options with nfdump, I cannot read back the records again.  This only
> happens when the -b or -a or -A are used.  Without any of these options,
> it works.  This is with NetFlow v9.
> 
> The DEVEL enabled debug printf seems to indicate that the extension map was saved in output file.
> However on subsequent read of the file, it appears not to find the extension records.

I just stumbled upon the same problem and I tracked it down to a change in
nfexport.c. The first thing ExportExtensionMaps() does, is to check whether
it needs to do any work at all:

  // no extension maps to export - nothing to do
  if ( extension_map_list->max_used < 0 )
    return;

In 1.6.12, this check was modified to use '== 0' instead of '< 0' which
seems to be wrong because the following loop uses <=, so would
include the 0.

I simply removed the check altogether and the problem is gone.

-- 
Frank Thilo - th...@un...        IRC: Chestal