Hello,

On Wed, 18 Jul 2007, at 13:56, Ras wrote:

> On 18/07/07, Peter Haag <[EMAIL PROTECTED]> wrote:
> > This looks totally strange to me. It seem some kind of template/data 
> > mismatch.
> > Have you more routers sending to the same collector? What does the daemon 
> > syslog file say?
> 
> I have two separate routers both sending a feed to the same
> collector.. 

   Not that it will help you, but i encountered the very same bug on two
   different tools (wireshark and a commercial collector) - it was due
   to the 2 routers exporting templates having same template id (there
   is nothing wrong with that), and the 'collector' using one template
   to decode the other set of data

   a write up here:
   
http://flowog.6f2.net/2006/12/20/templates-and-the-ghost-traffic-a-collective-hallucination-case/
 

   this template thing brings a lot of opportunities for interesting
   behaviors ...


-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Nfdump-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfdump-discuss

Reply via email to