[Cflowd] Please reply about this error message...!!!
̅ȗ̵
tensaich@gngidc.net
Thu, 17 Oct 2002 09:27:39 +0900
Hi...I was found solution under the error message.!!
Thanks everybody.!!
"flows.20020827: Invalid index in flow data file: DFB00000! Version 5 flow-
export is required with *all* data being saved using the COLLECT field of
the CISCOEXPORTER stanza(s)!"
Solution :
Comment next line in Cflow.pm
if ($Cflow::index != $Cflow::expected_entry_mask) {
warn "$ARGV: Invalid index in flow data file: ", sprintf("%X",
$Cflow::index), "! Version 5 flow-export is required with
*all* data being saved using the COLLECT field of the CISCOEXPORTER
stanza(s)!\n" if $Cflow::verbose;
next FILE
}
And I was made a example source with modification Cflow.pm
============================================================================
==============
#!/usr/local/bin/perl
use Cflow qw(:flowvars find);
#verbose(0);
find(\&wanted, @ARGV? @ARGV : <*.flows*>);
sub wanted {
printf "%s \t %5d \t %5d", $Cflow::localtime, $Cflow::src_as,
$Cflow::dst_as";
}
============================================================================
===============
Above example source show me the some result...but $Cflow::localtime is
incorrectly value like a under ..
2002/03/26 08:58:50 src_as dst_as
1970/01/01 09:00:00 src_as dst_as
1970/01/01 09:17:16 src_as dst_as
1970/01/01 10:22:47 src_as dst_as
1952/10/27 21:50:08 src_as dst_as
1975/04/27 06:26:24 src_as dst_as
1928/08/14 08:32:08 src_as dst_as
what's problem...??
Thanks...
-----Original Message-----
From: ̅ȗ̵ [mailto:tensaich@gngidc.net]
Sent: Wednesday, October 16, 2002 9:32 PM
To: cflowd@caida.org
Subject: [Cflowd] Please reply about this error message...!!!
Hi...
Under the perl source is example...in
http://net.doit.wisc.edu/~plonka/Cflow/Cflow.html.
When I run under example , it show me the next error message...
"flows.20020827: Invalid index in flow data file: DFB00000! Version 5 flow-
export is required with *all* data being saved using the COLLECT field of
the CISCOEXPORTER stanza(s)!"
What's problem ?
plz, reply for me...
thanks
ps. I configured v5 at router .
And cflowd version is 2-1-a6
bye
===============example source
============================================================================
===============
my $udp = getprotobyname('udp');
verbose(0);
find(\&wanted, @ARGV? @ARGV : <*.flows*>);
sub wanted {
return if ($srcport < 1024 || $dstport < 1024);
return unless (($srcport == 31337 || $dstport == 31337) &&
$udp == $protocol);
printf("%s %15.15s.%-5hu %15.15s.%-5hu %2hu %10u %10u\n",
$localtime,
$srcip,
$srcport,
$dstip,
$dstport,
$protocol,
$pkts,
$bytes)
}
_______________________________________________
Cflowd mailing list
Cflowd@caida.org
http://login.caida.org/mailman/listinfo/cflowd