Hi Henrik,
This bug was fixed long time ago. Are you really sure you run 1.6.4? Otherwise
contact me offlist.
- Peter
On 11/22/11 22:13, Henrik Lund Kramshøj wrote:
> Hi There
>
> I get the old and dreaded:
> "Corrupt data file. Missing extension map 0. Skip record"
>
> but if I restart the nfsen collection it works, until next roll-over.
>
> Currently running nfdump-1.6.4 and nfsen-1.3.5 on CentOS release 5.7 (Final)
> with both netflow and sflow sources
>
>
> Tried running with nfsen.conf:
> $EXTENSIONS = 'all';
>
> and tried removing it :-(
>
> I read the mailinglist and it is described on
> http://sourceforge.net/mailarchive/forum.php?thread_name=4D80F3B5.20706%40users.sourceforge.net&forum_name=nfsen-discuss
>
> but there is no mention of the fix being available, or how to work around
> this :-(
>
> What is the fix?
>
> Best regards
>
> Henrik
>
>
> the first file after restart nfcapd.201111222100
> Date flow start Duration Proto Src IP Addr:Port Dst IP
> Addr:Port Packets Bytes Flows
> 2011-11-22 21:03:35.284 0.000 TCP 10.xxxx07:1196 ->
> 80.xxx240:42730 4096 598016 1
> ....
> 2011-11-22 21:04:48.284 0.000 TCP 10xxx1:80 ->
> 10.xxx51:57206 4096 188416 1
> 2011-11-22 21:04:50.284 0.000 UDP 10.xxxx5:33203 ->
> 10.1xxxx:161 4096 221184 1
> Summary: total flows: 13, total bytes: 17.1 M, total packets: 53248, avg bps:
> 1.8 M, avg pps: 709, avg bpp: 321
> Time window: 2011-11-22 21:03:35 - 2011-11-22 21:04:50
> Total flows processed: 13, Blocks skipped: 0, Bytes read: 808
> Sys: 0.001s flows/second: 6503.3 Wall: 0.001s flows/second: 11178.0
>
> but from the next file automatically generated: nfcapd.201111222105
>
> Date flow start Duration Proto Src IP Addr:Port Dst IP
> Addr:Port Packets Bytes Flows
> Corrupt data file. Missing extension map 0. Skip record.
> Corrupt data file. Missing extension map 0. Skip record.
> Corrupt data file. Missing extension map 0. Skip record.
> ...
> Corrupt data file. Missing extension map 0. Skip record.
> Corrupt data file. Missing extension map 0. Skip record.
> Corrupt data file. Missing extension map 0. Skip record.
> Summary: total flows: 0, total bytes: 0, total packets: 0, avg bps: 0, avg
> pps: 0, avg bpp: 0
> Time window: 2038-01-19 04:14:07 - 1970-01-01 01:00:00
> Total flows processed: 0, Blocks skipped: 0, Bytes read: 2052
> Sys: 0.001s flows/second: 0.0 Wall: 0.001s flows/second: 0.0
>
>
>
>
>
> Best regards
>
> Henrik
>
> --
> Henrik Lund Kramshøj, Follower of the Great Way of Unix
> [email protected] [email protected]
> +45 2026 6000 cand.scient CISSP CEH
> http://solidonetworks.com/ Network Security is a business enabler
>
>
>
>
>
> ------------------------------------------------------------------------------
> All the data continuously generated in your IT infrastructure
> contains a definitive record of customers, application performance,
> security threats, fraudulent activity, and more. Splunk takes this
> data and makes sense of it. IT sense. And common sense.
> http://p.sf.net/sfu/splunk-novd2d
> _______________________________________________
> Nfsen-discuss mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
------------------------------------------------------------------------------
Cloud Services Checklist: Pricing and Packaging Optimization
This white paper is intended to serve as a reference, checklist and point of
discussion for anyone considering optimizing the pricing and packaging model
of a cloud services business. Read Now!
http://www.accelacomm.com/jaw/sfnl/114/51491232/
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss