Hi,

On 02.05.14 04:47, shasub...@gmail.com wrote:
> With version 1.6.12, when I write back to a file with the aggregate options 
> with nfdump, I cannot read back the records again.
> This only happens when the -b or -a or -A are used. Without any of these 
> options, it works. This is with NetFlow v9.
> 
> The DEVEL enabled debug printf seems to indicate that the extension map was 
> saved in output file.
> However on subsequent read of the file, it appears not to find the extension 
> records.
> 
> Any help in debugging this would be appreciated.
> 
> Shankar
> 
> nfdump -r captures -b -w output

I suspect you have an older ( pre 1.6.12 nfdump binary running ). If all 
binaries are properly replaced when you install
1.6.12, it work as expected. Even if the capture was pre 1.6.12.

        - Peter

> 
> nfdump -r output
> 
> Corrupt data file. Missing extension map 0. Skip record.
> 
> Corrupt data file. Missing extension map 0. Skip record.
> 
> Corrupt data file. Missing extension map 0. Skip record.
> 
> Corrupt data file. Missing extension map 0. Skip record.
> 
> Corrupt data file. Missing extension map 0. Skip record.
> 
> Corrupt data file. Missing extension map 0. Skip record.
> 
> Corrupt data file. Missing extension map 0. Skip record.
> 
> 
> 
> 
> 
> 
> ------------------------------------------------------------------------------
> "Accelerate Dev Cycles with Automated Cross-Browser Testing - For FREE
> Instantly run your Selenium tests across 300+ browser/OS combos.  Get 
> unparalleled scalability from the best Selenium testing platform available.
> Simple to use. Nothing to install. Get started now for free."
> http://p.sf.net/sfu/SauceLabs
> 
> 
> 
> _______________________________________________
> Nfdump-discuss mailing list
> Nfdump-discuss@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
> 

-- 
Be nice to your netflow data. Use NfSen and nfdump :)

------------------------------------------------------------------------------
Is your legacy SCM system holding you back? Join Perforce May 7 to find out:
• 3 signs your SCM is hindering your productivity
• Requirements for releasing software faster
• Expert tips and advice for migrating your SCM now
http://p.sf.net/sfu/perforce
_______________________________________________
Nfdump-discuss mailing list
Nfdump-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfdump-discuss

Reply via email to