Cflow: ftiheader_read(): failed

Date view Thread view Subject view Author view

Subject: Cflow: ftiheader_read(): failed
From: Allan Borman (allan.borman@hccs.edu)
Date: Thu May 29 2003 - 16:59:45 CDT

Hi All,
I have installed all on a LinuxRH9 and everything seems to be working 
correctly.  
I get the flow from Cisco router 7206.
I get files processed and I get data in rrds.
I am using CUFlow as the reporting part.

Problem:
It fails to create toptalkers.  I have attached the log and CUFlow.cf if it helps any. 
 I like to thank anyone in advance that has any suggestions.

Best Regards,

Allan Borman.


# These are the subnets in our network
# These are used only to determine whether a packet is inbound or 
# outbound
# Lines below were added for HCCS network -allanb- 05-28-03
Subnet 198.64.7.0/24
Subnet 198.64.57.0/24

# These are networks we are particularly interested in, and want to
# get separate rrd's for their aggregate traffic

Network 128.241.9.50/28 Verio
Network 10.1.1.0/28 Verio
#Network 172.31.41.1/24 DS1
#Network 172.31.41.2/24 DS2
#Network 128.59.39.0/24,128.59.31.0/24 watsun
#Network 128.59.59.0/24                machine-room
#Network 160.39.128.0/16               dormnet

# Where to put the rrd's
# Make sure this is the same as $rrddir in CUGrapher.pl
# Line below was added to get the reports for HCCS -allanb- 05-28-03
OutputDir /var/netflow/rrds

# Track multicast traffic
Multicast

# Keep top N lists 
# Show the top ten talkers, storing reports in /cflow/flows/reports
# and keeping the current report in /etc/httpd/data/reports/topten.html
# Line below was added to get the reports for HCCS -allanb- 05-28-03
Scoreboard 10 /var/netflow/scoreboard /var/netflow/scoreboard/hccs-top-talkers.html

# Same, but build an over-time average top N list
# Line below was added to get the reports for HCCS -allanb- 05-28-03
AggregateScore 10 /var/netflow/rrds/agg.dat /var/netflow/scoreboard/overall.html

# Our two netflor exporters. Produce service and protocol reports for the
# total, and each of these.
Router 128.241.9.50 Internet-7206-Main

# Services we are interested in
Service 20-21/tcp ftp
Service 22/tcp ssh
Service 23/tcp telnet
Service 25/tcp smtp
Service 53/udp,53/tcp dns
Service 80/tcp http
Service 19243/tcp http
Service 110/tcp pop3
Service 119/tcp nntp
Service 143/tcp imap
Service 412/tcp,412/udp dc
Service 443/tcp https
Service 1214/tcp kazaa
Service 4661-4662/tcp,4665/udp edonkey
Service 5190/tcp aim
Service 6346-6347/tcp gnutella
Service 6665-6669/tcp irc
Service 54320/tcp bo2k
Service 7070/tcp,554/tcp,6970-7170/udp real

# protocols we are interested in
Protocol 1 icmp
Protocol 4 ipinip
Protocol 6 tcp
Protocol 17 udp
Protocol 47 gre
Protocol 50 esp
Protocol 51 ah
Protocol 57 skip
Protocol 88 eigrp
Protocol 169
Protocol 255

TOS 0 normal
TOS 1-255 other

-- Help mailto:majordomo@net.doit.wisc.edu and say "help" in message body Unsubscribe mailto:majordomo@net.doit.wisc.edu and say "unsubscribe flowscan" in message body Archive http://net.doit.wisc.edu/~plonka/list/flowscan/archive/

Date view Thread view Subject view Author view

This archive was generated by hypermail 2b25 : Thu May 29 2003 - 17:02:04 CDT