-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
proserve - Michael Bastiaansen wrote:
> Hi,
>
> On the "Can't process block type 2. Skip block." topic.
>
>>> We are using FreeBSD 7.0 AMD 64 release.
>
>> Hmm .. not sure if the snapshot is already fully 64bit clean. Obviously not.
>> I need to verify and correct that.
>
> I was using a 64 bit version and had the same problem. Now I am trying 32 bit
> Debian:
The extension map problem should be solved with the next snapshot, coming this
weekend.
As for 'Can't process block type 2. Skip block'
You process flow files collected with nfcapd 1.b-snapshot-xx with nfdump 1.5.x.
1.5.x can not process the new blocks of
1.6 and skips them. So be sure to use new nfdump with new block type 2.
Be sure to compile new 1.6b with --enable-compat15, to transparently read any
block types.
- Peter
>
> netflow:~# uname -a
> Linux netflow 2.6.26-2-686 #1 SMP Wed Aug 19 06:06:52 UTC 2009 i686 GNU/Linux
>
> With the nfdump debian package:
>
> theouterrim:/data# dpkg -l | grep nfdump
> ii nfdump 1.5.7-5+b1 netflow
> capture daemon
>
> And the nfsen from sourceforge:
>
> netflow:/data/nfsen/bin# ./nfsen -V
> ./nfsen: 1.3.2 $Id: nfsen 8 2009-05-07 08:13:13Z haag $
>
> I am still receiving the following errors:
>
> netflow:/data/nfsen/profiles-data/live/cr1-nkf# nfdump -M
> /data/nfsen/profiles-data/live/cr1-nkf -r 2009/09/18/nfcapd.200909181140 -n
> 10 -s ip/flows
> Can't process block type 2. Skip block.
> Can't process block type 2. Skip block.
> Can't process block type 2. Skip block.
> Can't process block type 2. Skip block.
> Can't process block type 2. Skip block.
> Can't process block type 2. Skip block.
> Can't process block type 2. Skip block.
> Can't process block type 2. Skip block.
> Can't process block type 2. Skip block.
> Can't process block type 2. Skip block.
> Can't process block type 2. Skip block.
> Can't process block type 2. Skip block.
> Can't process block type 2. Skip block.
> Top 10 IP Addr ordered by flows:
> Date first seen Duration Proto IP Addr Flows Packets
> Bytes pps bps bpp
>
> Summary: total flows: 0, total bytes: 0, total packets: 0, avg bps: 0, avg
> pps: 0, avg bpp: 0
> Time window: 2038-01-19 04:14:07 - 1970-01-01 01:00:00
> Total flows processed: 0, Records skipped: 13, Bytes read: 13297108
> Sys: 0.012s flows/second: 0.0 Wall: 0.010s flows/second: 0.0
>
>
> I guess it is not a 64-bit problem!
>
> Does anyone have any ideas?
>
> Thanks
- --
_______ SWITCH - The Swiss Education and Research Network ______
Peter Haag, Security Engineer, Member of SWITCH CERT
PGP fingerprint: D9 31 D5 83 03 95 68 BA FB 84 CA 94 AB FC 5D D7
SWITCH, Werdstrasse 2, P.O. Box, CH-8021 Zurich, Switzerland
E-mail: [email protected] Web: http://www.switch.ch/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Darwin)
iQCVAwUBSrzRpf5AbZRALNr/AQKNyQP+N7q+6GbISM2/vos0VIXuqsRTt14KNrPH
bQUvZC91FyIAcuDVLyF1M97RPQId3cVVQREx1bq8AXxD6d8qadFuRf+pGaeo5YTN
XKtht+EuSJ6v0fRefM8CA5D2RorN+mMGLTk77cEsrHLCUZ5ymSvDGY8IopzMhail
ZgO0x/Gk6pA=
=eXFG
-----END PGP SIGNATURE-----
------------------------------------------------------------------------------
Come build with us! The BlackBerry® Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9-12, 2009. Register now!
http://p.sf.net/sfu/devconf
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
