Haoying/Stefan please send me a pcap file (full packets please) containing sflow packets I can use to reproduce the bug
Thanks Luca Haoying Liu wrote: > Hi Stefan, > I'm also having problem with sflow plugin. When I run it in daemon mode > (/usr/local/bin/ntop -d -L -u ntop -P /usr/local/var/ntop > --skip-version-check --use-syslog=daemon), I got tons of error of: > flow_sample_element length error (expected 0, found 4) > sometimes > counter_sample_element length error (expected 0, found 4) > > If I don't run it in daemon mode, I got: > flow_sample_element length error (expected 0, found 4) > SFABORT: 3 > SFABORT: 1 > > What sflow source are you using? I am using Juniper EX switches. > > Thanks, > Haoying > > -----Original Message----- > From: [email protected] > [mailto:[email protected]] On Behalf Of Stefan Priebe - > allied internet ag > Sent: Thursday, October 15, 2009 5:57 AM > To: [email protected] > Subject: [Ntop] Problem with sflow plugin > > Hi! > > I've installed ntop from SVN and configured the sflow plugin. Now i get > thousand of messages like this: > SFABORT: 2 > SFABORT: 1 > unrecognized extended data tag (source IP = 225.179.158.85) > 00-00-00-02-00-00-00-01-55-9E-B3-01-00-73-E5-FE-9C > FB-BF-AC-00-00-00-06-00-00-00-01-02-CB-BB-80-00 > 00-00-02-00-00-02-00-A5-6D-AE-00-00-00-00-00-00 > 00-00-02-00-00-00-03-00-00-00-01-00-00-00-01-00 > 00-00-38-00-00-00-38-00-14-22-15-DB-0C-00-12-1E > 00-2F-F0-08-00-45-00-00-28-7D-8C-40-00-79-06-D0 > 51-C1-64-E5-01-55-9E-B7-ED-04-98-00-50-FB-20-F2 > B5-B7-AB-6D-1E-50-10-FF-FF-E4-59-00-00-E4-00-00 > 00-00-03-00-00-00-01-00-00-00-64-00-00-00-00-00 > 00-01-2C-00-00-00-00-00-00-00-02-00-00-00-01-55 > 9E-B3-16-00-00-00-16-00-00-00-18-00-00-00-03-00 > 00-86-80-00-00-0C-89-00-00-60-67-00-00-00-00-00 > 00-00-01-02-CB-BB-81-00-00-00-02-00-00-02-00-A5 > 6D-B0-00-00-00-00-00-00-00-00-02-00-00-00-04-00 > 00-00-01-00-00-00-01-00-00-00-42-00-00-00-42-00 > E0-81-46-49-84-00-12-1E-00-2F-F0-08-00-45-00-00 > 34-EC-4E-40-00-37-06-3E-8B-54-72-B9-CA-55-9E-B5 > 0F-F3-81-00-6E-B4-DB-5C-08-E7-3F-1C-5B-80-10-FF > FF-7C-0D-00-00-01-01-08-0A-08-25-46-98-2A-F2-5F > A7-00-01-00-00-00-03-00-00-00-01-00-00-00-64-00 > 00-00-00-00-00-03-E8-00-00-00-00-00-00-00-02-00 > 00-00-01-55-9E-B5-0F-00-00-00-0E-00-00-00-18-00 > 00-00-03-00-00-86-80-00-00-1A-AE-00-00-60-67-00 > 00-00-00-00-00-00-01-02-CB-BB-82-00-00-00-02-00 > 00-02-00-A5-6D-B2-00-00-00-00-00-00-00-00-02-00 > 00-00-04-00-00-00-01-00-00-00-01-00-00-05-EA-00 > 00-00-80-00-E0-81-33-A6-76-00-12-1E-00-2F-F0-08 > 00-45-00-05-DC-91-73-00-00-38-06-A6-AB-5B-70-DE > DA-55-9E-B5-14-71-01-00-19-91-95-B1-4A-D8-E6-B8 > 5D-80-10-44-70-00-3D-00-00-01-01-08-0A-00-07-B8 > 99-2A-B7-8C-3D-69-39-78-45-39-75-39-76-4E-62-6B > 42-31-59-35-35-4F-65-6E-35-56-70-55-41-59-50-39 > 6A-36-73-65-75-75-53-66-39-2B-76-2F-41-4B-39-4B > 64-44-76-5A-45-5A-4A-64-5A-6E-64-48-55-71-77-32 > 0D-0A-44-00-00-00-03-00-00-00-01-00-00-00-64-00 > 00-00-00-00-00-03-E8-00-00-00-00-00-00-00-02-00 > 00-00-01-55-9E-B5-14-00-00-00-0E-00-00-00-18-00 > 00-00-03-00-00-86-80-00-00-20-FF-00-00-60-67-00 > 00-00-00-00-00-00-01-02-CB-BB-83-00-00-00-02-00 > 00-02-00-A5-6D-B4-00-00-00-00-00-00-00-00-02-00 > 00-00-04-00-00-00-01-00-00-00-01-00-00-05-47-00 > 00-00-80-00-00-5E-00-01-C9-00-12-1E-00-2F-F0-08 > 00-45-00-05-39-09-57-40-00-75-06-CB-C0-57-B0-C8 > 40-55-9E-B6-18-C3-5C-00-50-01-34-EE-ED-E2-FE-4F > 80-50-18-10-10-93-0C-00-00-47-45-54-20-2F-77-77 > 77-2F-64-65-6C-69-76-65-72-79-2F-6C-67-2E-70-68 > 70-3F-62-61-6E-6E-65-72-69-64-3D-33-31-38-26-63 > 61-6D-70-61-69-67-6E-69-64-3D-32-38-31-26-7A-6F > 6E-65-69-64-3D-36-35-26-6C-6F-63-3D-68-74-74-70 > 25-33-41-00-00-00-03-00-00-00-01-00-00-00-64-00 > 00-00-00-00-00-03-EA-00-00-00-00-00-00-00-02-00 > 00-00-01-55-9E-B6-18-00-00-00-0A-00-00-00-19-00 > 00-00-03-00-00-86-80-00-00-0C-F8-00-00-60-67-00 > 00-00-00-00-00-00-01-02-CB-BB-84-00-00-00-02-00 > 00-02-00-A5-6D-B6-00-00-00-00-00-00-00-00-02-00 > 00-00-03-00-00-00-01-00-00-00-01-00-00-00-3E-00 > 00-00-3E-00-14-22-15-DB-0C-00-12-1E-00-2F-F0-08 > 00-45-00-00-30-33-7A-40-00-6F-06-4D-19-4C-EF-34 > 39-55-9E-B4-6E-07-99-00-50-4E-06-43-DA-00-00-00 > 00-70-02-FF-FF-5E-55-00-00-02-04-05-80-01-01-04 > 02-20-FF-00-00-00-03-00-00-00-01-00-00-00-64-00 > 00-00-00-00-00-01-2C-00-00-00-00-00-00-00-02-00 > 00-00-01-55-9E-B3-16-00-00-00-0B-00-00-00-1A-00 > 00-00-03-00-00-86-80-00-00-1B-DC-00-00-60-67-00 > 00-00-00-00-00-00-01-02-CB-BB-85-00-00-00-02-00 > 00-02-00-A5-6D-B8-00-00-00-00-00-00-00-00-02-00 > 00-00-04-00-00-00-01-00-00-00-01-00-00-01-D9-00 > 00-00-80-00-30-48-D5-17-DA-00-12-1E-00-2F-F0-08 > 00-45-00-01-CB-20-84-40-00-7A-06-D0-6D-50-78-B3 > 0A-55-9E-B5-1A-BD-02-00-50-79-3E-E5-68-A9-92-9F > AF-50-18-FF-FF-25-52-00-00-47-45-54-20-2F-67-61 > 72-62-61-67-65-2F-35-39-2F-35-39-39-35-30-30-2F > 74-72-65-65-2F-34-38-33-33-33-39-30-5F-31-35-35 > 32-33-34-32-37-35-30-2E-70-6E-67-20-48-54-54-50 > 2F-31-2E-31-0D-0A-56-69-61-3A-20-31-2E-31-20-53 > 43-43-57-00-00-00-03-00-00-00-01-00-00-00-64-00 > 00-00-00-00-00-03-E8-00-00-00-00-00-00-00-02-00 > 00-00-01-55-9E-B5-1A-00-00-00-0E-00-00-00-18-00 > 00-00-03-00-00-86-80-00-00-20-FF-00-00-60-67-00 > 00-00-00 > > 225.179.158.85 is an mcast address what is this about? Also it does not > matter if i change the port. This message is always the same. > > Stefan > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > > > This email and any files transmitted with it are confidential and are > intended solely for the use of the individual or entity to whom they are > addressed. If you are not the original recipient or the person responsible > for delivering the email to the intended recipient, be advised that you have > received this email in error, and that any use, dissemination, forwarding, > printing, or copying of this email is strictly prohibited. If you received > this email in error, please immediately notify the sender and delete the > original. > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
