On Wed, Jan 03, 2007 at 05:04:32PM -0600, jay alvarez wrote:
>    I have a directory full of around 9000 five minute-flows. It
>    represents a whole month (Dec2006) of netflows collected.
...
>    when I run flowscan yesterday trying to graph
>    the whole month of December, to my surprise, most flows if not all,
>    that it is processing gives an error in the logs that looks like this:
>    ERROR updating /var/rrd/pi-cbu-g002/service_ms-netbios_dst.rrd:
>    illegal attempt to update using time 1166113200 when last update time
>    is 1167813900 (minimum one second step)

rrd files contain data that is averaged as time progresses and new entries
get inserted.  You can't add data with timestamps older than the most
recent data already in the file.  That error message, alas, is unclear for
this case.

You can still build your graphs, but you have to feed the log files to
FlowScan in chronological order.  Delete the rrd files and start from
scratch, making sure that FlowScan sees the oldest flow file first.
_______________________________________________
Flow-tools mailing list
[EMAIL PROTECTED]
http://mailman.splintered.net/mailman/listinfo/flow-tools

Reply via email to