Stefan yours works now, haoying not because he has captured the files with -i any so they don't have a valid eth header
Luca Stefan Priebe - allied internet ag wrote: > Hi Luca, > > have you had a look on my and Haoying's samples? > > Regards > Stefan > > Luca Deri schrieb: > >> Haoying/Stefan >> please send me a pcap file (full packets please) containing sflow >> packets I can use to reproduce the bug >> >> Thanks Luca >> >> Haoying Liu wrote: >> >>> Hi Stefan, >>> I'm also having problem with sflow plugin. When I run it in daemon mode >>> (/usr/local/bin/ntop -d -L -u ntop -P /usr/local/var/ntop >>> --skip-version-check --use-syslog=daemon), I got tons of error of: >>> flow_sample_element length error (expected 0, found 4) >>> sometimes >>> counter_sample_element length error (expected 0, found 4) >>> >>> If I don't run it in daemon mode, I got: >>> flow_sample_element length error (expected 0, found 4) >>> SFABORT: 3 >>> SFABORT: 1 >>> >>> What sflow source are you using? I am using Juniper EX switches. >>> >>> Thanks, >>> Haoying >>> >>> -----Original Message----- >>> From: [email protected] >>> [mailto:[email protected]] On Behalf Of Stefan Priebe - >>> allied internet ag >>> Sent: Thursday, October 15, 2009 5:57 AM >>> To: [email protected] >>> Subject: [Ntop] Problem with sflow plugin >>> >>> Hi! >>> >>> I've installed ntop from SVN and configured the sflow plugin. Now i get >>> thousand of messages like this: >>> SFABORT: 2 >>> SFABORT: 1 >>> unrecognized extended data tag (source IP = 225.179.158.85) >>> 00-00-00-02-00-00-00-01-55-9E-B3-01-00-73-E5-FE-9C >>> FB-BF-AC-00-00-00-06-00-00-00-01-02-CB-BB-80-00 >>> 00-00-02-00-00-02-00-A5-6D-AE-00-00-00-00-00-00 >>> 00-00-02-00-00-00-03-00-00-00-01-00-00-00-01-00 >>> 00-00-38-00-00-00-38-00-14-22-15-DB-0C-00-12-1E >>> 00-2F-F0-08-00-45-00-00-28-7D-8C-40-00-79-06-D0 >>> 51-C1-64-E5-01-55-9E-B7-ED-04-98-00-50-FB-20-F2 >>> B5-B7-AB-6D-1E-50-10-FF-FF-E4-59-00-00-E4-00-00 >>> 00-00-03-00-00-00-01-00-00-00-64-00-00-00-00-00 >>> 00-01-2C-00-00-00-00-00-00-00-02-00-00-00-01-55 >>> 9E-B3-16-00-00-00-16-00-00-00-18-00-00-00-03-00 >>> 00-86-80-00-00-0C-89-00-00-60-67-00-00-00-00-00 >>> 00-00-01-02-CB-BB-81-00-00-00-02-00-00-02-00-A5 >>> 6D-B0-00-00-00-00-00-00-00-00-02-00-00-00-04-00 >>> 00-00-01-00-00-00-01-00-00-00-42-00-00-00-42-00 >>> E0-81-46-49-84-00-12-1E-00-2F-F0-08-00-45-00-00 >>> 34-EC-4E-40-00-37-06-3E-8B-54-72-B9-CA-55-9E-B5 >>> 0F-F3-81-00-6E-B4-DB-5C-08-E7-3F-1C-5B-80-10-FF >>> FF-7C-0D-00-00-01-01-08-0A-08-25-46-98-2A-F2-5F >>> A7-00-01-00-00-00-03-00-00-00-01-00-00-00-64-00 >>> 00-00-00-00-00-03-E8-00-00-00-00-00-00-00-02-00 >>> 00-00-01-55-9E-B5-0F-00-00-00-0E-00-00-00-18-00 >>> 00-00-03-00-00-86-80-00-00-1A-AE-00-00-60-67-00 >>> 00-00-00-00-00-00-01-02-CB-BB-82-00-00-00-02-00 >>> 00-02-00-A5-6D-B2-00-00-00-00-00-00-00-00-02-00 >>> 00-00-04-00-00-00-01-00-00-00-01-00-00-05-EA-00 >>> 00-00-80-00-E0-81-33-A6-76-00-12-1E-00-2F-F0-08 >>> 00-45-00-05-DC-91-73-00-00-38-06-A6-AB-5B-70-DE >>> DA-55-9E-B5-14-71-01-00-19-91-95-B1-4A-D8-E6-B8 >>> 5D-80-10-44-70-00-3D-00-00-01-01-08-0A-00-07-B8 >>> 99-2A-B7-8C-3D-69-39-78-45-39-75-39-76-4E-62-6B >>> 42-31-59-35-35-4F-65-6E-35-56-70-55-41-59-50-39 >>> 6A-36-73-65-75-75-53-66-39-2B-76-2F-41-4B-39-4B >>> 64-44-76-5A-45-5A-4A-64-5A-6E-64-48-55-71-77-32 >>> 0D-0A-44-00-00-00-03-00-00-00-01-00-00-00-64-00 >>> 00-00-00-00-00-03-E8-00-00-00-00-00-00-00-02-00 >>> 00-00-01-55-9E-B5-14-00-00-00-0E-00-00-00-18-00 >>> 00-00-03-00-00-86-80-00-00-20-FF-00-00-60-67-00 >>> 00-00-00-00-00-00-01-02-CB-BB-83-00-00-00-02-00 >>> 00-02-00-A5-6D-B4-00-00-00-00-00-00-00-00-02-00 >>> 00-00-04-00-00-00-01-00-00-00-01-00-00-05-47-00 >>> 00-00-80-00-00-5E-00-01-C9-00-12-1E-00-2F-F0-08 >>> 00-45-00-05-39-09-57-40-00-75-06-CB-C0-57-B0-C8 >>> 40-55-9E-B6-18-C3-5C-00-50-01-34-EE-ED-E2-FE-4F >>> 80-50-18-10-10-93-0C-00-00-47-45-54-20-2F-77-77 >>> 77-2F-64-65-6C-69-76-65-72-79-2F-6C-67-2E-70-68 >>> 70-3F-62-61-6E-6E-65-72-69-64-3D-33-31-38-26-63 >>> 61-6D-70-61-69-67-6E-69-64-3D-32-38-31-26-7A-6F >>> 6E-65-69-64-3D-36-35-26-6C-6F-63-3D-68-74-74-70 >>> 25-33-41-00-00-00-03-00-00-00-01-00-00-00-64-00 >>> 00-00-00-00-00-03-EA-00-00-00-00-00-00-00-02-00 >>> 00-00-01-55-9E-B6-18-00-00-00-0A-00-00-00-19-00 >>> 00-00-03-00-00-86-80-00-00-0C-F8-00-00-60-67-00 >>> 00-00-00-00-00-00-01-02-CB-BB-84-00-00-00-02-00 >>> 00-02-00-A5-6D-B6-00-00-00-00-00-00-00-00-02-00 >>> 00-00-03-00-00-00-01-00-00-00-01-00-00-00-3E-00 >>> 00-00-3E-00-14-22-15-DB-0C-00-12-1E-00-2F-F0-08 >>> 00-45-00-00-30-33-7A-40-00-6F-06-4D-19-4C-EF-34 >>> 39-55-9E-B4-6E-07-99-00-50-4E-06-43-DA-00-00-00 >>> 00-70-02-FF-FF-5E-55-00-00-02-04-05-80-01-01-04 >>> 02-20-FF-00-00-00-03-00-00-00-01-00-00-00-64-00 >>> 00-00-00-00-00-01-2C-00-00-00-00-00-00-00-02-00 >>> 00-00-01-55-9E-B3-16-00-00-00-0B-00-00-00-1A-00 >>> 00-00-03-00-00-86-80-00-00-1B-DC-00-00-60-67-00 >>> 00-00-00-00-00-00-01-02-CB-BB-85-00-00-00-02-00 >>> 00-02-00-A5-6D-B8-00-00-00-00-00-00-00-00-02-00 >>> 00-00-04-00-00-00-01-00-00-00-01-00-00-01-D9-00 >>> 00-00-80-00-30-48-D5-17-DA-00-12-1E-00-2F-F0-08 >>> 00-45-00-01-CB-20-84-40-00-7A-06-D0-6D-50-78-B3 >>> 0A-55-9E-B5-1A-BD-02-00-50-79-3E-E5-68-A9-92-9F >>> AF-50-18-FF-FF-25-52-00-00-47-45-54-20-2F-67-61 >>> 72-62-61-67-65-2F-35-39-2F-35-39-39-35-30-30-2F >>> 74-72-65-65-2F-34-38-33-33-33-39-30-5F-31-35-35 >>> 32-33-34-32-37-35-30-2E-70-6E-67-20-48-54-54-50 >>> 2F-31-2E-31-0D-0A-56-69-61-3A-20-31-2E-31-20-53 >>> 43-43-57-00-00-00-03-00-00-00-01-00-00-00-64-00 >>> 00-00-00-00-00-03-E8-00-00-00-00-00-00-00-02-00 >>> 00-00-01-55-9E-B5-1A-00-00-00-0E-00-00-00-18-00 >>> 00-00-03-00-00-86-80-00-00-20-FF-00-00-60-67-00 >>> 00-00-00 >>> >>> 225.179.158.85 is an mcast address what is this about? Also it does not >>> matter if i change the port. This message is always the same. >>> >>> Stefan >>> _______________________________________________ >>> Ntop mailing list >>> [email protected] >>> http://listgateway.unipi.it/mailman/listinfo/ntop >>> >>> >>> This email and any files transmitted with it are confidential and are >>> intended solely for the use of the individual or entity to whom they are >>> addressed. If you are not the original recipient or the person responsible >>> for delivering the email to the intended recipient, be advised that you >>> have received this email in error, and that any use, dissemination, >>> forwarding, printing, or copying of this email is strictly prohibited. If >>> you received this email in error, please immediately notify the sender and >>> delete the original. >>> >>> _______________________________________________ >>> Ntop mailing list >>> [email protected] >>> http://listgateway.unipi.it/mailman/listinfo/ntop >>> >>> >> _______________________________________________ >> Ntop mailing list >> [email protected] >> http://listgateway.unipi.it/mailman/listinfo/ntop >> > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
