[Cflowd] ANyone help me with the following errors>

• Previous message: Mathias Gaertner: "[Cflowd] Missing networks"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Hi!

I am getting following errors when I run flowscan..

bash-2.05# /usr/local/FlowScan/bin/flowscan
Loading "/usr/local/FlowScan/bin/Napster_subnets.boulder" ...
Loading "/usr/local/FlowScan/bin/local_nets.boulder" ...
2002/03/25 12:07:33 working on file
/usr/local/arts/data/cflowd/flows/216.220.176.1.flows.0...
/usr/local/arts/data/cflowd/flows/216.220.176.1.flows.0: Invalid index in
cflowd flow file: 0x0! Version 5 flow-export is required with *all* fields
being saved. e.g. COLLECT: { flows }
2002/03/25 12:07:33 flowscan-1.020 CampusIO: Cflow::find took 0 wallclock
secs ( 0.57 usr + 0.02 sys = 0.59 CPU) for 1000000 flow file bytes, flow
hit ratio: 0/8307
perl in free(): warning: junk pointer, too high to make sense.
perl in free(): warning: junk pointer, too high to make sense.
perl in free(): warning: junk pointer, too high to make sense.
perl in free(): warning: modified (chunk-) pointer.
perl in free(): warning: junk pointer, too high to make sense.
perl in free(): warning: modified (chunk-) pointer.
perl in free(): warning: junk pointer, too high to make sense.
perl in free(): warning: junk pointer, too high to make sense.
ERROR updating /usr/local/arts/data/cflowd/flows/graphs/19669:6461.rrd:
unknown option '/usr/local/arts/data/cflowd/flows/graphs/19669:6461.rrd'
perl in free(): warning: modified (page-) pointer.
perl in free(): warning: junk pointer, too high to make sense.
perl in free(): warning: modified (chunk-) pointer.
perl in free(): warning: junk pointer, too high to make sense.
perl in free(): warning: junk pointer, too high to make sense.
perl in free(): warning: modified (page-) pointer.
ERROR updating /usr/local/arts/data/cflowd/flows/graphs/19669:19669.rrd:
unknown option '/usr/local/arts/data/cflowd/flows/graphs/19669:19669.rrd'
perl in free(): warning: chunk is already free.
perl in free(): warning: modified (page-) pointer.
perl in free(): warning: junk pointer, too high to make sense.
perl in free(): warning: modified (chunk-) pointer.
perl in free(): warning: junk pointer, too high to make sense.
perl in free(): warning: junk pointer, too high to make sense.
perl in free(): warning: modified (page-) pointer.

Doing a flowdump on
'/usr/local/arts/data/cflowd/flows/216.220.176.1.flows.0' gives me the
correct values..

FLOW
  index: 0xc7ffff
  router: 216.220.176.1
  src IP: 195.52.119.62
  dst IP: 208.184.216.89
  input ifIndex: 13
  output ifIndex: 0
  src port: 2024
  dst port: 8888
  pkts: 4
  bytes: 192
  IP nexthop: 0.0.0.0
  start time: Mon Mar 25 12:07:37 2002
  end time: Mon Mar 25 12:07:58 2002
  protocol: 6
  tos: 0
  src AS: 12312
  dst AS: 19669
  src masklen: 16
  dst masklen: 24
  TCP flags: 0x2 (SYN)
  engine type: 1
  engine id: 2
FLOW
  index: 0xc7ffff
  router: 216.220.176.1
  src IP: 24.48.213.69
  dst IP: 64.124.41.188
  input ifIndex: 13
  output ifIndex: 0
  src port: 54284
  dst port: 8888
  pkts: 4
  bytes: 192
  IP nexthop: 0.0.0.0
  start time: Mon Mar 25 12:07:37 2002
  end time: Mon Mar 25 12:07:58 2002
  protocol: 6
  tos: 0
  src AS: 7843
  dst AS: 19669
  src masklen: 20
  dst masklen: 25
  TCP flags: 0x2 (SYN)
  engine type: 1
  engine id: 2

Am I missing something here. It complains that flows are not in version 5
format but I have configured my flow-export on Cisco GSR in version 5. I
canot figure this out.

thanks,

Pranav

_______________________________________________
Cflowd mailing list
Cflowd@caida.org
http://login.caida.org/mailman/listinfo/cflowd

• Next message: Edwin D. Viņas: "Re: [Cflowd] How to dump cflowd data into Mysql database"
• Previous message: Mathias Gaertner: "[Cflowd] Missing networks"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.4 : Tue Apr 23 2002 - 14:43:06 PDT