Re: [Nfdump-discuss] nfAnon drops the time window

[Peter H. <ph...@us...>]

Hi Chris,
I need to check this. I'll get back to you.

- Peter

On 04.08.15 22:14, Chris Browning wrote:
> Hi,
> 
> I am trying to use the nfanon tool but after it is run on multiple files time 
> window is corrupt.
> 
> EG:
> Before
> Time window: 2015-07-22 00:00:00 - 2015-07-22 23:59:59
> After (ALL files except for the first file processed will report this window)
> Time window: 2030-11-03 15:15:09 - 1995-08-17 05:48:21
> Sometimes (again ALL files except for the first file):
> Time window: Time Window unknown
> 
> If I run nfanon in a loop so it processes one file only per run using -r it 
> works fine, its only when I run with -R that it corrupts all the time window.
> 
> Has anyone come across this before?
> 
> I am using nfdump 1.6.13 from src.
> 
> I note the release notes for 1.6.10p1 has this note:
> - Fix bug in nfanon - stat record update.
> 
> Given I am running 1.6.13 this fix should be applied?
> 
> 
> Cheers,
> 
> 
> Chris Browning
> Senior Network Engineer
> 
> 
> 
> 
> DDI : 
> +64 7 974 9971
> 1 London Street
> M:
> 021 259 0964
> PO Box 9361
> E:
> chr...@li... 
> Hamilton 3240
> W:
> www.lightwire.co.nz
> New Zealand
> 
>    
> Please consider the environment before printing this e-mail.
>  
> The information contained in this email message is intended for the addressee 
> only and may contain privileged information. If you are not the intended 
> recipient of this message or have received this message in error, you must not 
> peruse, use, distribute or copy this message or any of its contents.  Please 
> notify the sender immediately by e-mail if you have received this e-mail by 
> mistake and delete this e-mail from your system.
> 
> 
> 
> ------------------------------------------------------------------------------
> 
> 
> 
> _______________________________________________
> Nfdump-discuss mailing list
> Nfd...@li...
> https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
> 

-- 
Be nice to your netflow data. Use NfSen and nfdump :)