[Cflowd] Please reply about this error message...!!!

̅ȗ̵ tensaich@gngidc.net
Thu, 17 Oct 2002 09:27:39 +0900


Hi...I was found solution under the error message.!!

Thanks everybody.!!

"flows.20020827: Invalid index in flow data file: DFB00000!  Version 5 flow-
export is required with *all* data being saved using the COLLECT field of
the CISCOEXPORTER stanza(s)!"

Solution :

Comment next line in Cflow.pm
      
      if ($Cflow::index != $Cflow::expected_entry_mask) {
      warn "$ARGV: Invalid index in flow data file: ", sprintf("%X",
$Cflow::index), "!  Version 5 flow-export is required with
      *all* data being saved using the COLLECT field of the CISCOEXPORTER
stanza(s)!\n" if $Cflow::verbose;
      next FILE
      }

And I was made a example source with modification Cflow.pm

============================================================================
==============
#!/usr/local/bin/perl

use Cflow qw(:flowvars find);


#verbose(0);
find(\&wanted, @ARGV? @ARGV : <*.flows*>);


sub wanted {
	printf "%s \t %5d \t %5d", $Cflow::localtime, $Cflow::src_as,
$Cflow::dst_as";
	}
============================================================================
===============

Above example source show me the some result...but $Cflow::localtime is
incorrectly value like a under ..

2002/03/26 08:58:50	src_as		dst_as   
1970/01/01 09:00:00	src_as		dst_as           
1970/01/01 09:17:16	src_as		dst_as        
1970/01/01 10:22:47	src_as		dst_as        
1952/10/27 21:50:08	src_as		dst_as        
1975/04/27 06:26:24	src_as		dst_as        
1928/08/14 08:32:08	src_as		dst_as        

what's problem...??

Thanks...


 
-----Original Message-----
From: ̅ȗ̵ [mailto:tensaich@gngidc.net]
Sent: Wednesday, October 16, 2002 9:32 PM
To: cflowd@caida.org
Subject: [Cflowd] Please reply about this error message...!!!


Hi...

Under the  perl source is example...in
http://net.doit.wisc.edu/~plonka/Cflow/Cflow.html.

When I run under example , it show me the next error message...

"flows.20020827: Invalid index in flow data file: DFB00000!  Version 5 flow-
export is required with *all* data being saved using the COLLECT field of
the CISCOEXPORTER stanza(s)!"

What's problem ? 

plz, reply for me...

thanks

ps. I configured v5 at router .
And cflowd version is 2-1-a6

bye

===============example source
============================================================================
===============
   my $udp = getprotobyname('udp');
   verbose(0);
   find(\&wanted, @ARGV? @ARGV : <*.flows*>);

   sub wanted {
      return if ($srcport < 1024 || $dstport < 1024);
      return unless (($srcport == 31337 || $dstport == 31337) &&
                      $udp == $protocol);

      printf("%s %15.15s.%-5hu %15.15s.%-5hu %2hu %10u %10u\n",
             $localtime,
             $srcip,
             $srcport,
             $dstip,
             $dstport,
             $protocol,
             $pkts,
             $bytes)
   }


_______________________________________________
Cflowd mailing list
Cflowd@caida.org
http://login.caida.org/mailman/listinfo/cflowd