Subject: hit ratio: 0/... and SEGV? (was "Re: A question")
From: Dave Plonka (plonka@doit.wisc.edu)
Date: Tue May 08 2001 - 10:08:42 CDT
On Tue, May 08, 2001 at 03:50:04PM +0800, pon wrote: > Hi: > Why flow hit ratio: 0/72727 and Segmentation fault (core dumped ) > . > > Is Napster_subnets.boulder,local_nets.boulder or our_subnets.boulder file > setup wrong? Possibly, but it shouldn't cause a SEGV. You should work from the examples in the INSTALL doc. > Please tell me.Please. > > > [root@cflowd bin]# ./flowscan > Loading "/usr/local/flows/bin/Napster_subnets.boulder" ... > Loading "/usr/local/flows/bin/local_nets.boulder" ... > Loading "/usr/local/flows/bin/our_subnets.boulder" ... > 2001/05/07 14:06:45 working on file > /usr/local/arts/data/cflowd/flows/flows.0... > 2001/05/07 14:07:47 flowscan-1.020 SubNetIO: Cflow::find took 62 wallclock > secs (49.04 usr + 0.95 sys = 49.99 CPU) for 4000000 flow file bytes, flow > hit ratio: 0/72727 > Segmentation fault (core dumped) What is the file that you have called "flows.0"? The patched cflowd should be producing only a raw flow file named "flows.current" and then rename it with a timestamp every five minutes to "flows.YYYYMMDD_HH:MI:SS+TZ". If you're asking flowscan to process files that aren't cflowd-format raw flow files or that don't have timestamps in their name, you'll get undefined behavior (such as possible a SEGV). Dave -- plonka@doit.wisc.edu http://net.doit.wisc.edu/~plonka ARS:N9HZF Madison, WI -- Help mailto:majordomo@net.doit.wisc.edu and say "help" in message body Unsubscribe mailto:majordomo@net.doit.wisc.edu and say "unsubscribe flowscan" in message body Archive http://net.doit.wisc.edu/~plonka/list/flowscan/archive/
This archive was generated by hypermail 2b25 : Tue May 08 2001 - 10:13:52 CDT