Re: [Nfdump-discuss] Nfdump Netflow v9 logs capture timestamp date as 1970-01-01 00:00:00.51658
netflow collecting and processing tools
Brought to you by:
phaag
|
From: Akshay U. <aks...@gm...> - 2015-09-17 06:55:14
|
Hi Peter, Please let me know if you have any insight into this issue. Appreciate your help. Thank you. On Tue, Sep 15, 2015 at 2:54 PM, Akshay Ukey <aks...@gm...> wrote: > Hi, > > I am using nfdump/nfcapd version 1.6.13 for capturing and processing > netflow v9 logs. > > I am seeing a number of records where the "Date first seen" is being > recorded as "1970-01-01 00:00:00.51658". > > To give a sense of frequency of occurrence of such records, there are > ~1,48,000 out of ~13,31,000 records captured over 4 hour period which have > invalid "Date first seen" value. Hence "Time Duration" and "Bits Per > Second" fields also have invalid value. For remaining records the "Date > first seen" field has correct time value. > > Is this a known issue with nfdump/nfcapd? Appreciate help on how to > further investigate/fix this issue. > > Thank you. > > -- > Regards, > Akshay K. Ukey. > -- Regards, Akshay K. Ukey. |