Hi everyone, Ed!
(sorry for top posting).
I'm trying to investigate further on the root of my problem.
So, flowscan was done processing ft-v05.2006-12-01.174500+0800.
Now it then process ft-v05.2006-12-01.175000+0800 shortly after.
Then an error message pops up:
illegal attempt to update using time 1164965700(Fri Dec 1 17:35:00 PHT 2006)
when last update time is 1164966000(Fri Dec 1 17:40:00 PHT 2006)
And it was a chain reaction... all flows being processed since Dec 1, 2006
5:30PM up to present keeps on (or most of the time) throwing the same error,
resulting to empty badly needed graphs. :-(
Any idea what's happening above? What can I do?
After processing Dec06 17:45 it recorded the last update as Dec06 17:40. (5
minutes earlier than the actual dated-flow? could it be that my router's clock
are 5 minutes ahead of my collector?)
Then when it began processing Dec06 1750 and tries to populate the rrds, it is
trying to record the update time as 17:35, which is 5 minute behind the last
update.. Any idea what's causing this? How to correct this?
Thanks!
----- Original Message ----
From: jay alvarez <[EMAIL PROTECTED]>
To: Ed Ravin <[EMAIL PROTECTED]>
Cc: [email protected]
Sent: Thursday, January 4, 2007 8:01:50 AM
Subject: Re: [Flow-tools] No graphs created after flow-capturing a month of
flows (Illegal attempt to update using time)
----- Original Message ----
From: Ed Ravin <[EMAIL PROTECTED]>
To: jay alvarez <[EMAIL PROTECTED]>
Cc: [email protected]
Sent: Thursday, January 4, 2007 7:52:38 AM
Subject: Re: [Flow-tools] No graphs created after flow-capturing a month of
flows (Illegal attempt to update using time)
On Wed, Jan 03, 2007 at 03:25:57PM -0800, jay alvarez wrote:
...
> You're going to have to get your hands dirty - start again, and stop things
> when you see that error. Find out what went wrong, fix it, and restart
> the process.
> Somewhere,
somehow, FlowScan got ahold of an out-of-order file, or
> otherwise move the timestamp ahead of your backlog of data. Use
> "date -r NNNNNN" to convert the numeric timestamps in the error message
> into normal dates, that should give you a hint. Also, look for running
> jobs or cron entries that might call FlowScan or drop things in its
> directory. It might be the "link me" script that runs on the 5 minute
> rotation that is somehow confusing things.
Ok, I will try to digest everything you've said when I get to the office. Its
almost 8:00 am here in the Philippines and my work starts at 9:00. Still I'm
not sure what to tell my boss later when I told him yesterday to just give me a
day to process all the flows not realizing I would encounter such problem. :-(
Thanks Ed! You've been a great help..
More power to the open source community!
=)
-jay
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com _______________________________________________
Flow-tools mailing list
[EMAIL PROTECTED]
http://mailman.splintered.net/mailman/listinfo/flow-tools
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com _______________________________________________
Flow-tools mailing list
[EMAIL PROTECTED]
http://mailman.splintered.net/mailman/listinfo/flow-tools
