RE: [Cflowd] Please reply about this error message...!!!

From: 최상천 (tensaich@gngidc.net)
Date: Wed Oct 16 2002 - 17:27:39 PDT

  • Next message: scottv@attbi.com: "[Cflowd] (no subject)"

    Hi...I was found solution under the error message.!!

    Thanks everybody.!!

    "flows.20020827: Invalid index in flow data file: DFB00000! Version 5 flow-
    export is required with *all* data being saved using the COLLECT field of
    the CISCOEXPORTER stanza(s)!"

    Solution :

    Comment next line in Cflow.pm
          
          if ($Cflow::index != $Cflow::expected_entry_mask) {
          warn "$ARGV: Invalid index in flow data file: ", sprintf("%X",
    $Cflow::index), "! Version 5 flow-export is required with
          *all* data being saved using the COLLECT field of the CISCOEXPORTER
    stanza(s)!\n" if $Cflow::verbose;
          next FILE
          }

    And I was made a example source with modification Cflow.pm

    ============================================================================
    ==============
    #!/usr/local/bin/perl

    use Cflow qw(:flowvars find);

    #verbose(0);
    find(\&wanted, @ARGV? @ARGV : <*.flows*>);

    sub wanted {
            printf "%s \t %5d \t %5d", $Cflow::localtime, $Cflow::src_as,
    $Cflow::dst_as";
            }
    ============================================================================
    ===============

    Above example source show me the some result...but $Cflow::localtime is
    incorrectly value like a under ..

    2002/03/26 08:58:50 src_as dst_as
    1970/01/01 09:00:00 src_as dst_as
    1970/01/01 09:17:16 src_as dst_as
    1970/01/01 10:22:47 src_as dst_as
    1952/10/27 21:50:08 src_as dst_as
    1975/04/27 06:26:24 src_as dst_as
    1928/08/14 08:32:08 src_as dst_as

    what's problem...??

    Thanks...

     
    -----Original Message-----
    From: 최상천 [mailto:tensaich@gngidc.net]
    Sent: Wednesday, October 16, 2002 9:32 PM
    To: cflowd@caida.org
    Subject: [Cflowd] Please reply about this error message...!!!

    Hi...

    Under the perl source is example...in
    http://net.doit.wisc.edu/~plonka/Cflow/Cflow.html.

    When I run under example , it show me the next error message...

    "flows.20020827: Invalid index in flow data file: DFB00000! Version 5 flow-
    export is required with *all* data being saved using the COLLECT field of
    the CISCOEXPORTER stanza(s)!"

    What's problem ?

    plz, reply for me...

    thanks

    ps. I configured v5 at router .
    And cflowd version is 2-1-a6

    bye

    ===============example source
    ============================================================================
    ===============
       my $udp = getprotobyname('udp');
       verbose(0);
       find(\&wanted, @ARGV? @ARGV : <*.flows*>);

       sub wanted {
          return if ($srcport < 1024 || $dstport < 1024);
          return unless (($srcport == 31337 || $dstport == 31337) &&
                          $udp == $protocol);

          printf("%s %15.15s.%-5hu %15.15s.%-5hu %2hu %10u %10u\n",
                 $localtime,
                 $srcip,
                 $srcport,
                 $dstip,
                 $dstport,
                 $protocol,
                 $pkts,
                 $bytes)
       }

    _______________________________________________
    Cflowd mailing list
    Cflowd@caida.org
    http://login.caida.org/mailman/listinfo/cflowd

    _______________________________________________
    Cflowd mailing list
    Cflowd@caida.org
    http://login.caida.org/mailman/listinfo/cflowd



    This archive was generated by hypermail 2.1.4 : Wed Oct 16 2002 - 17:47:09 PDT