problem when running flowscan

Date view	Thread view	Subject view	Author view

Subject: problem when running flowscan
From: Abi (pgl49us@yahoo.com)
Date: Wed Sep 12 2001 - 07:32:21 CDT

Next message: Dave Plonka: "Does NetFlow report its own traffic? (was "Re: Tracking Flowscan bandwidth utillization")"
Previous message: maoguang: "netflow packet larger than 1500 bytes ?"

Hi,

I have installed FlowScan-1.006 with arts++-1-1-a8,
cflowd-2-1-b1, Cflow-1.040. 
My /usr/local/arts/etc/cfdcollect.conf :

system {
  logFacility:  local6 
  dataDirectory: /usr/local/arts/data/cflowd
  filePrefix:  arts
  pidFile:  /usr/local/arts/etc/cfdcollect.pid
}
cflowd {
  host:                 localhost
  tcpCollectPort:       2056
  minPollInterval:      300
}

My /usr/local/arts/etc/cflowd.conf :
OPTIONS {
  LOGFACILITY:      local6
  TCPCOLLECTPORT:    2056
  TABLESOCKFILE:
/usr/local/arts/etc/cflowdtable.socket
  FLOWDIR:              /var/local/flows
  FLOWFILELEN:          1000000
  NUMFLOWFILES:         10
  MINLOGMISSED:         300
}
COLLECTOR {
  HOST:         127.0.0.1  
  AUTH:         none
}

CISCOEXPORTER {
  HOST:    10.64.0.1  
  ADDRESSES:    { 10.64.0.1,    
                  10.95.252.2 } 
  CFDATAPORT:   2055           
  SNMPCOMM:     'public'
  LOCALAS:      555
  COLLECT:      { protocol, portmatrix, ifmatrix,
nexthop, netmatrix,
                  asmatrix, tos, flows }
}


when running cfdcollect I got error message in
/var/log/message :

Sep 12 18:34:47 protolizer cfdcollect[6235]: [E]
connect(4,0x80e9634,16) (host localhost port 2056)
failed: Connection refused {CflowdServer.cc:112}
Sep 12 18:34:47 protolizer cfdcollect[6235]: [I]
sleeping for 299 seconds.

but when running cflowdmux and cflowd, message in the
log is OK.

after that, in /var/local/flows i got
10.64.0.1.flows.[0-9] files. So i created my
flowscan.cf :
FlowFileGlob /var/local/flows/10.64.0.1.flows.[0-9]
ReportClasses CampusIO 
WaitSeconds 300
Verbose 1

and when running /var/local/flows/bin/flowscan, I got
error message :

$ ./flowscan
Loading "/var/local/flows/bin/local_nets.boulder" ...
2001/09/12 18:52:04 working on file
/var/local/flows/10.64.0.1.flows.0...
2001/09/12 18:52:04 %CampusIO::FTPSession -> 0
2001/09/12 18:52:04 %CampusIO::FTPSession -> 0
/var/local/flows/10.64.0.1.flows.0: Invalid index in
cflowd flow file: 0x0! Version 5 flow-export is
required with *all* fields being saved.
2001/09/12 18:52:05 flowscan-1.020 CampusIO:
Cflow::find took  1 wallclock secs ( 0.11 usr +  0.02
sys =  0.13 CPU) for 1000000 flow file bytes, flow hit
ratio:
 19/336
Memory fault (core dumped) 

How i can solve this problem ?

TIA

-Abi-


__________________________________________________
Do You Yahoo!?
Get email alerts & NEW webcam video instant messaging with Yahoo! Messenger
http://im.yahoo.com

--
Help        mailto:majordomo@net.doit.wisc.edu and say "help" in message body
Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
"unsubscribe flowscan" in message body
Archive     http://net.doit.wisc.edu/~plonka/list/flowscan/archive/

Next message: Dave Plonka: "Does NetFlow report its own traffic? (was "Re: Tracking Flowscan bandwidth utillization")"
Previous message: maoguang: "netflow packet larger than 1500 bytes ?"

Date view	Thread view	Subject view	Author view

This archive was generated by hypermail 2b25 : Wed Sep 12 2001 - 07:40:09 CDT