I've seen this several times in various forms. 1 packet flows with 2,000,000
octets and the like. Likely a corrupt PDU.


On 10/20/05 2:57 PM, "Mike Hunter" <[EMAIL PROTECTED]> wrote:

> On Oct 07, "[EMAIL PROTECTED]" wrote:
> 
>> I found a flow like this in my netflow-data (i used flow-stat -f10)
>> 
>> # src IPaddr     dst IPaddr       flows                 octets
>> packets
>> 1.2.3.4       2.3.4.5          1                     34922232
>> 1986
>> 
>> This means, that my overall paket size is about 17584 bytes ? How can this
>> be ? 
>> Netflow runs on a cisco 7206VXR
> 
> What does flow-print -f 5 say about the packet?
> 
> Are you running on a 64 Bit OS?  There have been some 32bit/64 bit bugs.
> 
> It's also not unlikely that the netflow PDU is corrupt or something.
> 
> Mike
> _______________________________________________
> Flow-tools mailing list
> [EMAIL PROTECTED]
> http://mailman.splintered.net/mailman/listinfo/flow-tools


-- 

Adam  Powers
Director of Technology
Lancope, Inc.
c. 678.725.1028
e. [EMAIL PROTECTED]



_______________________________________________
Flow-tools mailing list
[EMAIL PROTECTED]
http://mailman.splintered.net/mailman/listinfo/flow-tools

Reply via email to