On 18/07/07, Peter Haag <[EMAIL PROTECTED]> wrote: > This looks totally strange to me. It seem some kind of template/data mismatch. > Have you more routers sending to the same collector? What does the daemon > syslog file say?
I have two separate routers both sending a feed to the same collector.. I hadn't realised nfcapd logged anywhere (is it possible to specify a log file instead of using syslog?). The log is full of lines like: Jul 18 13:54:31 server ./nfcapd[18709]: Ident: 'none' Flows: 116, Packets: 2161, Bytes: 137239143, Sequence Errors: 17, Bad Packets: 0 Jul 18 13:54:39 server ./nfcapd[18709]: Process_v9: Corrupt data flowset? Pad bytes: 12 Jul 18 13:54:58 server ./nfcapd[18709]: Process_v9: Corrupt data flowset? Pad bytes: 8 I guess that's probably fairly non-goodness. Is that going to be just because I'm collecting from two devices? Thanks, Ras ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ _______________________________________________ Nfdump-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
