Hi,

I hope you can help me on this on. We badly needed the traffic graphs from our 
netflows as we are using it for billing our customers.

I'm using flow-capture to capture a whole month of flows. My setup is the one 
described here: 
http://www.dynamicnetworks.us/netflow/5-configure-flow-tools.html

I have a directory full of around 9000 five minute-flows. It represents a whole 
month (Dec2006) of netflows collected. I decided not to run flowscan before and 
just let the directory grow up until 1 month has passed. Then when I run 
flowscan yesterday trying to graph the whole month of December, to my surprise, 
most flows if not all, that it is processing gives an error in the logs that 
looks like this:

ERROR updating /var/rrd/pi-cbu-g002/service_ms-netbios_dst.rrd: illegal attempt 
to update using time 1166113200 when last update time is 1167813900 (minimum 
one second step)

Does this mean all those log files are unusable anymore? I've seen some users 
in google search having the same problem with their rrds as well however 
there's not much information given as to why this is happening.. I hope you can 
explain all of these once and for all.. =)

Would you kindly explain or at least point me somewhere I can learn about this 
error message and how to fix it.

As far as i can understand, that error above says it cannot add the new data 
into the rrd because it sees that the timestamp when the rrd was last updated 
was newer than the one I am trying to add.. Why is this happening? Can you 
further explain the process of storing the flows into the rrds. Is it because 
those created symlinks to those flows which I am feeding the flowscan right now 
has a new timestamp which doesn't correspond to the date of creation of the 
flows they are pointing to?

If there's any fix to this, please let me know and I'm willing to bang my head 
against the wall just to produce the graphs we needed. :-(

Right now, flowscan is still processing until Dec15 but when I launch my 
CUGrapher.pl, not an inch of graphs is seen.. =(

I hope you can help me.

Thank you very much

Sincerely,
jay



__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
_______________________________________________
Flow-tools mailing list
[EMAIL PROTECTED]
http://mailman.splintered.net/mailman/listinfo/flow-tools

Reply via email to