[Cflowd] ANyone help me with the following errors>

From: Pranav Shah (pranav@exchange.napster.com)
Date: Mon Mar 25 2002 - 12:10:44 PST

  • Next message: Edwin D. Viņas: "Re: [Cflowd] How to dump cflowd data into Mysql database"

    Hi!

    I am getting following errors when I run flowscan..

    bash-2.05# /usr/local/FlowScan/bin/flowscan
    Loading "/usr/local/FlowScan/bin/Napster_subnets.boulder" ...
    Loading "/usr/local/FlowScan/bin/local_nets.boulder" ...
    2002/03/25 12:07:33 working on file
    /usr/local/arts/data/cflowd/flows/216.220.176.1.flows.0...
    /usr/local/arts/data/cflowd/flows/216.220.176.1.flows.0: Invalid index in
    cflowd flow file: 0x0! Version 5 flow-export is required with *all* fields
    being saved. e.g. COLLECT: { flows }
    2002/03/25 12:07:33 flowscan-1.020 CampusIO: Cflow::find took 0 wallclock
    secs ( 0.57 usr + 0.02 sys = 0.59 CPU) for 1000000 flow file bytes, flow
    hit ratio: 0/8307
    perl in free(): warning: junk pointer, too high to make sense.
    perl in free(): warning: junk pointer, too high to make sense.
    perl in free(): warning: junk pointer, too high to make sense.
    perl in free(): warning: modified (chunk-) pointer.
    perl in free(): warning: junk pointer, too high to make sense.
    perl in free(): warning: modified (chunk-) pointer.
    perl in free(): warning: junk pointer, too high to make sense.
    perl in free(): warning: junk pointer, too high to make sense.
    ERROR updating /usr/local/arts/data/cflowd/flows/graphs/19669:6461.rrd:
    unknown option '/usr/local/arts/data/cflowd/flows/graphs/19669:6461.rrd'
    perl in free(): warning: modified (page-) pointer.
    perl in free(): warning: junk pointer, too high to make sense.
    perl in free(): warning: modified (chunk-) pointer.
    perl in free(): warning: junk pointer, too high to make sense.
    perl in free(): warning: junk pointer, too high to make sense.
    perl in free(): warning: modified (page-) pointer.
    ERROR updating /usr/local/arts/data/cflowd/flows/graphs/19669:19669.rrd:
    unknown option '/usr/local/arts/data/cflowd/flows/graphs/19669:19669.rrd'
    perl in free(): warning: chunk is already free.
    perl in free(): warning: modified (page-) pointer.
    perl in free(): warning: junk pointer, too high to make sense.
    perl in free(): warning: modified (chunk-) pointer.
    perl in free(): warning: junk pointer, too high to make sense.
    perl in free(): warning: junk pointer, too high to make sense.
    perl in free(): warning: modified (page-) pointer.

    Doing a flowdump on
    '/usr/local/arts/data/cflowd/flows/216.220.176.1.flows.0' gives me the
    correct values..

    FLOW
      index: 0xc7ffff
      router: 216.220.176.1
      src IP: 195.52.119.62
      dst IP: 208.184.216.89
      input ifIndex: 13
      output ifIndex: 0
      src port: 2024
      dst port: 8888
      pkts: 4
      bytes: 192
      IP nexthop: 0.0.0.0
      start time: Mon Mar 25 12:07:37 2002
      end time: Mon Mar 25 12:07:58 2002
      protocol: 6
      tos: 0
      src AS: 12312
      dst AS: 19669
      src masklen: 16
      dst masklen: 24
      TCP flags: 0x2 (SYN)
      engine type: 1
      engine id: 2
    FLOW
      index: 0xc7ffff
      router: 216.220.176.1
      src IP: 24.48.213.69
      dst IP: 64.124.41.188
      input ifIndex: 13
      output ifIndex: 0
      src port: 54284
      dst port: 8888
      pkts: 4
      bytes: 192
      IP nexthop: 0.0.0.0
      start time: Mon Mar 25 12:07:37 2002
      end time: Mon Mar 25 12:07:58 2002
      protocol: 6
      tos: 0
      src AS: 7843
      dst AS: 19669
      src masklen: 20
      dst masklen: 25
      TCP flags: 0x2 (SYN)
      engine type: 1
      engine id: 2

    Am I missing something here. It complains that flows are not in version 5
    format but I have configured my flow-export on Cisco GSR in version 5. I
    canot figure this out.

    thanks,

    Pranav

    _______________________________________________
    Cflowd mailing list
    Cflowd@caida.org
    http://login.caida.org/mailman/listinfo/cflowd



    This archive was generated by hypermail 2.1.4 : Tue Apr 23 2002 - 14:43:06 PDT