hmm .. are your sure this is netflow v9 what you export and not IPFIX?
IPFIX is not (yet) supported by nfdump.
- Peter
On 3/25/11 14:27, Jakub Słociński wrote:
> Hi,
> I bet I saw this issue somewhere before and the solution for it, but can't
> find it. Using nfdump-1.6.3 with OIOS XR patch + patched to log filed_type
> and length. Logs on one collector:
>
> Process_v9: [2097] field ID > 128 - field ignored. (field_type: 129,
> length: 4)
> Process_v9: [2097] field ID > 128 - field ignored. (field_type: 128,
> length: 4)
> Process_v9: [2177] field ID > 128 - field ignored. (field_type: 129,
> length: 4)
> Process_v9: [2177] field ID > 128 - field ignored. (field_type: 128,
> length: 4)
>
> What it could be connected to?
> I saw 1.6.3p1 patch but it changes only v5_v7 which in fact I don't use.
> What I have missed? :)
>
> Thanks in advance!
>
>
>
>
>
> ------------------------------------------------------------------------------
> Enable your software for Intel(R) Active Management Technology to meet the
> growing manageability and security demands of your customers. Businesses
> are taking advantage of Intel(R) vPro (TM) technology - will your software
> be a part of the solution? Download the Intel(R) Manageability Checker
> today! http://p.sf.net/sfu/intel-dev2devmar
>
>
>
> _______________________________________________
> Nfdump-discuss mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
--
--
Be nice to your netflow data
------------------------------------------------------------------------------
Enable your software for Intel(R) Active Management Technology to meet the
growing manageability and security demands of your customers. Businesses
are taking advantage of Intel(R) vPro (TM) technology - will your software
be a part of the solution? Download the Intel(R) Manageability Checker
today! http://p.sf.net/sfu/intel-dev2devmar
_______________________________________________
Nfdump-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
