Hi There I get the old and dreaded: "Corrupt data file. Missing extension map 0. Skip record"
but if I restart the nfsen collection it works, until next roll-over. Currently running nfdump-1.6.4 and nfsen-1.3.5 on CentOS release 5.7 (Final) with both netflow and sflow sources Tried running with nfsen.conf: $EXTENSIONS = 'all'; and tried removing it :-( I read the mailinglist and it is described on http://sourceforge.net/mailarchive/forum.php?thread_name=4D80F3B5.20706%40users.sourceforge.net&forum_name=nfsen-discuss but there is no mention of the fix being available, or how to work around this :-( What is the fix? Best regards Henrik the first file after restart nfcapd.201111222100 Date flow start Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2011-11-22 21:03:35.284 0.000 TCP 10.xxxx07:1196 -> 80.xxx240:42730 4096 598016 1 .... 2011-11-22 21:04:48.284 0.000 TCP 10xxx1:80 -> 10.xxx51:57206 4096 188416 1 2011-11-22 21:04:50.284 0.000 UDP 10.xxxx5:33203 -> 10.1xxxx:161 4096 221184 1 Summary: total flows: 13, total bytes: 17.1 M, total packets: 53248, avg bps: 1.8 M, avg pps: 709, avg bpp: 321 Time window: 2011-11-22 21:03:35 - 2011-11-22 21:04:50 Total flows processed: 13, Blocks skipped: 0, Bytes read: 808 Sys: 0.001s flows/second: 6503.3 Wall: 0.001s flows/second: 11178.0 but from the next file automatically generated: nfcapd.201111222105 Date flow start Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows Corrupt data file. Missing extension map 0. Skip record. Corrupt data file. Missing extension map 0. Skip record. Corrupt data file. Missing extension map 0. Skip record. ... Corrupt data file. Missing extension map 0. Skip record. Corrupt data file. Missing extension map 0. Skip record. Corrupt data file. Missing extension map 0. Skip record. Summary: total flows: 0, total bytes: 0, total packets: 0, avg bps: 0, avg pps: 0, avg bpp: 0 Time window: 2038-01-19 04:14:07 - 1970-01-01 01:00:00 Total flows processed: 0, Blocks skipped: 0, Bytes read: 2052 Sys: 0.001s flows/second: 0.0 Wall: 0.001s flows/second: 0.0 Best regards Henrik -- Henrik Lund Kramshøj, Follower of the Great Way of Unix [email protected] [email protected] +45 2026 6000 cand.scient CISSP CEH http://solidonetworks.com/ Network Security is a business enabler ------------------------------------------------------------------------------ All the data continuously generated in your IT infrastructure contains a definitive record of customers, application performance, security threats, fraudulent activity, and more. Splunk takes this data and makes sense of it. IT sense. And common sense. http://p.sf.net/sfu/splunk-novd2d _______________________________________________ Nfsen-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
