Hi there,
We are constantly getting the following error while receiving NetFlow
data in HP-UX with "flow-receive 0/0/9000 | flow-print":
flow-receive: ftpdu_seq_check(): src_ip=10.11.171.7 dst_ip=0.0.0.0 d_version=5
expecting=11046479 received=7110511 lost=4291031327
flow-receive: ftpdu_seq_check(): src_ip=10.11.171.7 dst_ip=0.0.0.0 d_version=5
expecting=7110541 received=2978914 lost=4290835668
flow-receive: ftpdu_seq_check(): src_ip=10.11.171.7 dst_ip=0.0.0.0 d_version=5
expecting=2978944 received=11046479 lost=8067535
flow-receive: ftpdu_seq_check(): src_ip=10.11.171.7 dst_ip=0.0.0.0 d_version=5
expecting=11046509 received=7110541 lost=4291031327
flow-receive: ftpdu_seq_check(): src_ip=10.11.171.7 dst_ip=0.0.0.0 d_version=5
expecting=7110571 received=6511458 lost=4294368182
flow-receive: ftpdu_seq_check(): src_ip=10.11.171.7 dst_ip=0.0.0.0 d_version=5
expecting=6511608 received=7110571 lost=598963
flow-receive: ftpdu_seq_check(): src_ip=10.11.171.7 dst_ip=0.0.0.0 d_version=5
expecting=7110601 received=11046509 lost=3935908
flow-receive: ftpdu_seq_check(): src_ip=10.11.171.7 dst_ip=0.0.0.0 d_version=5
expecting=11046539 received=7110601 lost=4291031357
flow-receive: ftpdu_seq_check(): src_ip=10.11.171.7 dst_ip=0.0.0.0 d_version=5
expecting=7110631 received=11046539 lost=3935908
It seems that some datagrams get lost... But when we use flow-capture,
flow-header reports:
#
# mode: normal
# capture hostname: geomfe
# capture start: Wed Nov 23 12:15:00 2005
# capture end: Wed Nov 23 12:30:00 2005
# capture period: 900 seconds
# compress: on
# byte order: big
# stream version: 3
# export version: 5
# lost flows: 0
# corrupt packets: 0
# sequencer resets: 6064
# capture flows: 344250
#
So, no lost flows. Can anyone tell me, please, if I should get worried about
this? What does that "sequencer resets" means? Is everything ok? Thanks in
advance,
Arménio Pinto
_______________________________________________
Flow-tools mailing list
[EMAIL PROTECTED]
http://mailman.splintered.net/mailman/listinfo/flow-tools
