Hi list,
If you are using IPFIX, you should apply the patch below. It fixes an
uninitialised variable, when building up the
internal translation table:
--- nfdump-1.6.9/bin/ipfix.c 2012-11-10 12:40:54.000000000 +0100
+++ nfdump-current-8/bin/ipfix.c 2013-04-13 12:15:41.000000000 +0200
@@ -615,6 +615,7 @@
table->updated = time(NULL);
// IPFIX only has 64bit counters
+ table->flags = 0;
SetFlag(table->flags, FLAG_PKG_64);
SetFlag(table->flags, FLAG_BYTES_64);
table->ICMP_offset = 0;
Otherwise, your flows may potentially lock corrupt for IP addresses v4/v6
and/or bytes/packet counters.
Cheers
- Peter
--
Be nice to your netflow data. Use NfSen and nfdump :)
------------------------------------------------------------------------------
Precog is a next-generation analytics platform capable of advanced
analytics on semi-structured data. The platform includes APIs for building
apps and a phenomenal toolset for data science. Developers can use
our toolset for easy data analysis & visualization. Get a free account!
http://www2.precog.com/precogplatform/slashdotnewsletter
_______________________________________________
Nfdump-discuss mailing list
Nfdump-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
