[Nfdump-discuss] softflowd, nfdump, v9 sequence errors
netflow collecting and processing tools
Brought to you by:
phaag
|
From: Mac F. <boo...@gm...> - 2015-05-06 18:22:59
|
Hello! Have a Ubuntu 14.04.2 LTS, softflowd 0.9.9-1 and nfdump 1.6.8p1-1. Softflowd exporting flows as Netflow v9. Have a persistent sequence errors in log file in nfcapd: May 6 08:52:32 wall1 nfcapd[4324]: Add extension: 2 byte input/output interface index May 6 08:52:32 wall1 nfcapd[4324]: Add extension: 4 byte input/output interface index May 6 08:52:32 wall1 nfcapd[4324]: Add extension: 2 byte src/dst AS number May 6 08:52:32 wall1 nfcapd[4324]: Add extension: 4 byte src/dst AS number May 6 08:52:32 wall1 nfcapd[4324]: Bound to IPv4 host/IP: 127.0.0.1, Port: 9995 May 6 08:52:32 wall1 nfcapd[4324]: Standard setsockopt, SO_RCVBUF is 212992 Requested length is 4194304 bytes May 6 08:52:32 wall1 nfcapd[4324]: System set setsockopt, SO_RCVBUF to 425984 bytes May 6 08:52:32 wall1 nfcapd[4326]: Startup. May 6 08:52:32 wall1 nfcapd[4326]: Init v9: Max number of v9 tags: 75 May 6 08:52:32 wall1 nfcapd[4326]: Init IPFIX: Max number of IPFIX tags: 62 May 6 08:52:33 wall1 nfcapd[4326]: Process_v9: New exporter: SysID: 1, Domain: 0, IP: 127.0.0.1 May 6 08:52:33 wall1 nfcapd[4326]: Process_v9: [0] Add template 1024 May 6 08:52:33 wall1 nfcapd[4326]: Process_v9: [0] Add template 2048 May 6 08:53:00 wall1 nfcapd[4326]: Ident: 'none' Flows: 7056, Packets: 131783, Bytes: 143337625, Sequence Errors: 863, Bad Packets: 0 May 6 08:53:00 wall1 nfcapd[4326]: Total ignored packets: 0 May 6 08:54:00 wall1 nfcapd[4326]: Ident: 'none' Flows: 17270, Packets: 211099, Bytes: 192228413, Sequence Errors: 2414, Bad Packets: 0 May 6 08:54:00 wall1 nfcapd[4326]: Total ignored packets: 0 May 6 08:55:00 wall1 nfcapd[4326]: Ident: 'none' Flows: 15260, Packets: 150364, Bytes: 130629042, Sequence Errors: 2032, Bad Packets: 0 When softflowd export flows as v5 there are no sequence errors. I tried play with buffer size with no success. Where is error? How can i solve this problem? Thanks. |