Re: [Nfdump-discuss] handling template timeout
netflow collecting and processing tools
Brought to you by:
phaag
|
From: Peter H. <ph...@us...> - 2015-09-21 08:02:10
|
Hi, So far, I never saw an exporter, which limits the lifetime of templates. On 20/09/15 17:46, Николай Кинаш wrote: > Hi all. > > Is nfcapd check timeout of templates? > From https://www.ietf.org/rfc/rfc3954.txt > 9. The Collector Side > ........ > The life of a template at the Collector is limited to a fixed refresh > timeout. Templates not refreshed from the Exporter within the To my knowledge, this "fixed refresh timeout" is nowhere really defined. > timeout are expired at the Collector. The Collector MUST NOT attempt > to decode the Flow or Options Data Records with an expired Template. > > I have inspected source code of nfdump. I haven't find any instructions to check timeout of template inside Process_v9 function. > There is only functions GetTranslationTable and add_translation_table. > There is nothing like "remove_expire_translation_table" function. Templates are opnly updated if they get refreshed from the device. They do not expire. Any pointers in how this "fixed refresh timeout" is defined are welcomed! Thanks - Peter > > Thanks. > > > > ------------------------------------------------------------------------------ > > > > _______________________________________________ > Nfdump-discuss mailing list > Nfd...@li... > https://lists.sourceforge.net/lists/listinfo/nfdump-discuss > |