Hi Luca, have you had a look on my and Haoying's samples?
Regards Stefan Luca Deri schrieb: > Haoying/Stefan > please send me a pcap file (full packets please) containing sflow > packets I can use to reproduce the bug > > Thanks Luca > > Haoying Liu wrote: >> Hi Stefan, >> I'm also having problem with sflow plugin. When I run it in daemon mode >> (/usr/local/bin/ntop -d -L -u ntop -P /usr/local/var/ntop >> --skip-version-check --use-syslog=daemon), I got tons of error of: >> flow_sample_element length error (expected 0, found 4) >> sometimes >> counter_sample_element length error (expected 0, found 4) >> >> If I don't run it in daemon mode, I got: >> flow_sample_element length error (expected 0, found 4) >> SFABORT: 3 >> SFABORT: 1 >> >> What sflow source are you using? I am using Juniper EX switches. >> >> Thanks, >> Haoying >> >> -----Original Message----- >> From: [email protected] >> [mailto:[email protected]] On Behalf Of Stefan Priebe - >> allied internet ag >> Sent: Thursday, October 15, 2009 5:57 AM >> To: [email protected] >> Subject: [Ntop] Problem with sflow plugin >> >> Hi! >> >> I've installed ntop from SVN and configured the sflow plugin. Now i get >> thousand of messages like this: >> SFABORT: 2 >> SFABORT: 1 >> unrecognized extended data tag (source IP = 225.179.158.85) >> 00-00-00-02-00-00-00-01-55-9E-B3-01-00-73-E5-FE-9C >> FB-BF-AC-00-00-00-06-00-00-00-01-02-CB-BB-80-00 >> 00-00-02-00-00-02-00-A5-6D-AE-00-00-00-00-00-00 >> 00-00-02-00-00-00-03-00-00-00-01-00-00-00-01-00 >> 00-00-38-00-00-00-38-00-14-22-15-DB-0C-00-12-1E >> 00-2F-F0-08-00-45-00-00-28-7D-8C-40-00-79-06-D0 >> 51-C1-64-E5-01-55-9E-B7-ED-04-98-00-50-FB-20-F2 >> B5-B7-AB-6D-1E-50-10-FF-FF-E4-59-00-00-E4-00-00 >> 00-00-03-00-00-00-01-00-00-00-64-00-00-00-00-00 >> 00-01-2C-00-00-00-00-00-00-00-02-00-00-00-01-55 >> 9E-B3-16-00-00-00-16-00-00-00-18-00-00-00-03-00 >> 00-86-80-00-00-0C-89-00-00-60-67-00-00-00-00-00 >> 00-00-01-02-CB-BB-81-00-00-00-02-00-00-02-00-A5 >> 6D-B0-00-00-00-00-00-00-00-00-02-00-00-00-04-00 >> 00-00-01-00-00-00-01-00-00-00-42-00-00-00-42-00 >> E0-81-46-49-84-00-12-1E-00-2F-F0-08-00-45-00-00 >> 34-EC-4E-40-00-37-06-3E-8B-54-72-B9-CA-55-9E-B5 >> 0F-F3-81-00-6E-B4-DB-5C-08-E7-3F-1C-5B-80-10-FF >> FF-7C-0D-00-00-01-01-08-0A-08-25-46-98-2A-F2-5F >> A7-00-01-00-00-00-03-00-00-00-01-00-00-00-64-00 >> 00-00-00-00-00-03-E8-00-00-00-00-00-00-00-02-00 >> 00-00-01-55-9E-B5-0F-00-00-00-0E-00-00-00-18-00 >> 00-00-03-00-00-86-80-00-00-1A-AE-00-00-60-67-00 >> 00-00-00-00-00-00-01-02-CB-BB-82-00-00-00-02-00 >> 00-02-00-A5-6D-B2-00-00-00-00-00-00-00-00-02-00 >> 00-00-04-00-00-00-01-00-00-00-01-00-00-05-EA-00 >> 00-00-80-00-E0-81-33-A6-76-00-12-1E-00-2F-F0-08 >> 00-45-00-05-DC-91-73-00-00-38-06-A6-AB-5B-70-DE >> DA-55-9E-B5-14-71-01-00-19-91-95-B1-4A-D8-E6-B8 >> 5D-80-10-44-70-00-3D-00-00-01-01-08-0A-00-07-B8 >> 99-2A-B7-8C-3D-69-39-78-45-39-75-39-76-4E-62-6B >> 42-31-59-35-35-4F-65-6E-35-56-70-55-41-59-50-39 >> 6A-36-73-65-75-75-53-66-39-2B-76-2F-41-4B-39-4B >> 64-44-76-5A-45-5A-4A-64-5A-6E-64-48-55-71-77-32 >> 0D-0A-44-00-00-00-03-00-00-00-01-00-00-00-64-00 >> 00-00-00-00-00-03-E8-00-00-00-00-00-00-00-02-00 >> 00-00-01-55-9E-B5-14-00-00-00-0E-00-00-00-18-00 >> 00-00-03-00-00-86-80-00-00-20-FF-00-00-60-67-00 >> 00-00-00-00-00-00-01-02-CB-BB-83-00-00-00-02-00 >> 00-02-00-A5-6D-B4-00-00-00-00-00-00-00-00-02-00 >> 00-00-04-00-00-00-01-00-00-00-01-00-00-05-47-00 >> 00-00-80-00-00-5E-00-01-C9-00-12-1E-00-2F-F0-08 >> 00-45-00-05-39-09-57-40-00-75-06-CB-C0-57-B0-C8 >> 40-55-9E-B6-18-C3-5C-00-50-01-34-EE-ED-E2-FE-4F >> 80-50-18-10-10-93-0C-00-00-47-45-54-20-2F-77-77 >> 77-2F-64-65-6C-69-76-65-72-79-2F-6C-67-2E-70-68 >> 70-3F-62-61-6E-6E-65-72-69-64-3D-33-31-38-26-63 >> 61-6D-70-61-69-67-6E-69-64-3D-32-38-31-26-7A-6F >> 6E-65-69-64-3D-36-35-26-6C-6F-63-3D-68-74-74-70 >> 25-33-41-00-00-00-03-00-00-00-01-00-00-00-64-00 >> 00-00-00-00-00-03-EA-00-00-00-00-00-00-00-02-00 >> 00-00-01-55-9E-B6-18-00-00-00-0A-00-00-00-19-00 >> 00-00-03-00-00-86-80-00-00-0C-F8-00-00-60-67-00 >> 00-00-00-00-00-00-01-02-CB-BB-84-00-00-00-02-00 >> 00-02-00-A5-6D-B6-00-00-00-00-00-00-00-00-02-00 >> 00-00-03-00-00-00-01-00-00-00-01-00-00-00-3E-00 >> 00-00-3E-00-14-22-15-DB-0C-00-12-1E-00-2F-F0-08 >> 00-45-00-00-30-33-7A-40-00-6F-06-4D-19-4C-EF-34 >> 39-55-9E-B4-6E-07-99-00-50-4E-06-43-DA-00-00-00 >> 00-70-02-FF-FF-5E-55-00-00-02-04-05-80-01-01-04 >> 02-20-FF-00-00-00-03-00-00-00-01-00-00-00-64-00 >> 00-00-00-00-00-01-2C-00-00-00-00-00-00-00-02-00 >> 00-00-01-55-9E-B3-16-00-00-00-0B-00-00-00-1A-00 >> 00-00-03-00-00-86-80-00-00-1B-DC-00-00-60-67-00 >> 00-00-00-00-00-00-01-02-CB-BB-85-00-00-00-02-00 >> 00-02-00-A5-6D-B8-00-00-00-00-00-00-00-00-02-00 >> 00-00-04-00-00-00-01-00-00-00-01-00-00-01-D9-00 >> 00-00-80-00-30-48-D5-17-DA-00-12-1E-00-2F-F0-08 >> 00-45-00-01-CB-20-84-40-00-7A-06-D0-6D-50-78-B3 >> 0A-55-9E-B5-1A-BD-02-00-50-79-3E-E5-68-A9-92-9F >> AF-50-18-FF-FF-25-52-00-00-47-45-54-20-2F-67-61 >> 72-62-61-67-65-2F-35-39-2F-35-39-39-35-30-30-2F >> 74-72-65-65-2F-34-38-33-33-33-39-30-5F-31-35-35 >> 32-33-34-32-37-35-30-2E-70-6E-67-20-48-54-54-50 >> 2F-31-2E-31-0D-0A-56-69-61-3A-20-31-2E-31-20-53 >> 43-43-57-00-00-00-03-00-00-00-01-00-00-00-64-00 >> 00-00-00-00-00-03-E8-00-00-00-00-00-00-00-02-00 >> 00-00-01-55-9E-B5-1A-00-00-00-0E-00-00-00-18-00 >> 00-00-03-00-00-86-80-00-00-20-FF-00-00-60-67-00 >> 00-00-00 >> >> 225.179.158.85 is an mcast address what is this about? Also it does not >> matter if i change the port. This message is always the same. >> >> Stefan >> _______________________________________________ >> Ntop mailing list >> [email protected] >> http://listgateway.unipi.it/mailman/listinfo/ntop >> >> >> This email and any files transmitted with it are confidential and are >> intended solely for the use of the individual or entity to whom they are >> addressed. If you are not the original recipient or the person responsible >> for delivering the email to the intended recipient, be advised that you have >> received this email in error, and that any use, dissemination, forwarding, >> printing, or copying of this email is strictly prohibited. If you received >> this email in error, please immediately notify the sender and delete the >> original. >> >> _______________________________________________ >> Ntop mailing list >> [email protected] >> http://listgateway.unipi.it/mailman/listinfo/ntop >> > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
