Your flow hit ratio still seems quite low. Check your configuration and make sure all of your IP addresses are in the configuration. These lines:
> NextHops and OutputIfIndexes are undefined. > Identifying outbound flows based solely on destination address ... Indicate that you may not be configured correctly. > I defined every subnets inside our network, but even I only define > Subnet as "Subnet 10.10.0.0/24" it only update with first flow-cap > file. The timestamps on the flow files in your sample indicate that you are rotating the flow files at 30-minute intervals. As Flowscan uses the timestamp embedded in the filename to update the RRD, and it creates RRDs with a 5-minute step, this will cause your RRDs to have mostly NaN values, and therefore not graph. ----- Original Message ----- From: "jing shen" <[EMAIL PROTECTED]> To: "Gustavo Rodrigues Ramos" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Tuesday, November 23, 2004 10:16 PM Subject: Re[2]: [Flow-tools] Flowscan hit ratio 0/0 > Hi �� > > after re-compiling cflow under contrib directory, flowscan can > process flow-cap files, but it always shows flow hit rate is 0 ( see > below). If I turn to CampusIO, it shows no-zero hit rate. > > I graph data with CUGraph.pl, and find only the first recording file > is recorded no matter how many flow files have been processed. > > I defined every subnets inside our network, but even I only define > Subnet as "Subnet 10.10.0.0/24" it only update with first flow-cap > file. > > Why? > > > > > > > =========================== > > [EMAIL PROTECTED] bin]$ flowscan > 2004/11/23 19:04:53 working on file /home/sj/bin/flowscan/ft/ft-v05.2004-11-18.180721+0800... > 2004/11/23 19:08:46 flowscan-1.020 CUFlow: Cflow::find took 233 wallclock secs (231.39 usr + 0.17 sys = 231.56 CPU) for 106352795 flow file bytes, flow hit ratio: 0/5039529 > 2004/11/23 19:08:46 flowscan-1.020 CUFlow: report took 0 wallclock secs ( 0.00 usr + 0.00 sys = 0.00 CPU) > 2004/11/23 19:08:46 working on file /home/sj/bin/flowscan/ft/ft-v05.2004-11-18.183645+0800... > > [EMAIL PROTECTED] bin]$ > > > > ===================================== > [EMAIL PROTECTED] bin]$ flowscan > NextHops and OutputIfIndexes are undefined. > Identifying outbound flows based solely on destination address ... > Loading "Napster_subnets.boulder" ... > Loading "local_nets.boulder" ... > 2004/11/23 18:41:45 working on file /home/sj/bin/flowscan/ft/ft-v05.2004-11-18.170835+0800... > Loading "asn.txt" ... 65536 ASNs loaded. > 2004/11/23 18:48:55 flowscan-1.020 CampusIO: Cflow::find took 430 wallclock secs (426.56 usr + 0.30 sys = 426.86 CPU) for 104919878 flow file bytes, flow hit ratio: 3259/5006399 > 2004/11/23 18:48:55 flowscan-1.020 CampusIO: report took 0 wallclock secs ( 0.13 usr + 0.01 sys = 0.14 CPU) > 2004/11/23 18:48:55 working on file /home/sj/bin/flowscan/ft/ft-v05.2004-11-18.173758+0800... > 2004/11/23 18:56:13 flowscan-1.020 CampusIO: Cflow::find took 438 wallclock secs (435.13 usr + 0.22 sys = 435.35 CPU) for 104546946 flow file bytes, flow hit ratio: 3499/4979659 > > ======================================== > > > > > > In 2004��11��23�գ�1:03:13 you said: > > > Hi, > > > Dan Benson wrote: > >> > >> 2004/11/22 11:10:03 working on file > >> /netflow/ft-v05.2004-11-22.110500-0500... > >> /netflow/ft-v05.2004-11-22.110500-0500: Invalid index in cflowd flow file: > >> 0xCF100103! Version 5 flow-export is required with *all* fields being > > > Please see: > > > http://mailman.splintered.net/pipermail/flow-tools/2004-November/002447.html > > > If it doesn't work, let us know. > > > Bye, > > > > -- > -- -- > Regards > > > Jing Shen > > ****************************************** > * The sunshine of lifetime is made up of * > * little beams which is bright all the * > * time. * > ****************************************** > > > _______________________________________________ > Flow-tools mailing list > [EMAIL PROTECTED] > http://mailman.splintered.net/mailman/listinfo/flow-tools > _______________________________________________ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools
