Our EXTREME router is sending sflow samples to sfcapd (from nfdump-1.6.13), every now and then we're getting these messages in the log:
Sep 29 15:03:21 netflow sfcapd[44715]: SFLOW: unexpected datagram version number#012 (source IP = 10.47.86.147) 00-09-00-0B-<*>-07-B8-B5-10-59-CE-44-90-24-2D-2C-16-00#01200-01-01-01-0C-01-08-00-00-32-CA-00-00-27-0E-00#01200-00-00-00-00-00-02-00-00-00-00-00-00-00-A4-07#012B3-E6-98-07-B4-8E-7C-06-C0-C0-01-C1-AF-49-C8-C1#012AF-49-02-E7-9B-00-B3-C1-AF-49-02-00-00-32-CA-00#01200-27-0E-00-00-00-00-00-00-00-06-00-00-00-00-00#01200-01-EC-07-B4-B4-92-07-B5-9F-EC-06-C0-C0-01-C1#012AF-49-D6-C1-AF-49-02-B2-1D-00-B3-C1-AF-49-02-00#01200-32-CA-00-00-27-0E-00-00-00-00-00-00-00-06-00#0120 Sep 29 15:03:21 netflow sfcapd[44715]: SFLOW: caught exception: 2 Sep 29 15:05:00 netflow sfcapd[44715]: Ident: 'rouxwin' Flows: 28571, Packets: 29256704, Bytes: 26728795136, Sequence Errors: 0, Bad Packets: 0 Sep 29 15:05:00 netflow sfcapd[44715]: Total ignored packets: 0 Sep 29 15:08:21 netflow sfcapd[44715]: SFLOW: unexpected datagram version number#012 (source IP = 10.47.86.147) 00-09-00-0B-<*>-07-BD-48-F0-59-CE-45-BC-24-2D-2C-17-00#01200-01-01-01-0C-01-A4-00-00-32-CA-00-00-27-0E-00#01200-00-00-00-00-00-01-00-00-00-00-00-00-00-52-07#012B8-3F-CC-07-B8-AD-22-06-C0-C0-01-C1-AF-49-D6-C1#012AF-49-02-9C-11-00-B3-C1-AF-49-02-00-00-32-CA-00#01200-27-0E-00-00-00-00-00-00-00-06-00-00-00-00-00#01200-01-EC-07-B8-EB-AC-07-B9-D2-1A-06-C0-C0-01-C1#012AF-49-C8-C1-AF-49-02-BA-9B-00-B3-C1-AF-49-02-00#01200-32-CA-00-00-27-0E-00-00-00-00-00-00-00-06-00#0120 Sep 29 15:08:21 netflow sfcapd[44715]: SFLOW: caught exception: 2 Sep 29 15:10:00 netflow sfcapd[44715]: Ident: 'rouxwin' Flows: 28110, Packets: 28784640, Bytes: 25755358208, Sequence Errors: 0, Bad Packets: 0 Sep 29 15:10:00 netflow sfcapd[44715]: Total ignored packets: 0 Sep 29 15:10:43 netflow sfcapd[44715]: SFLOW: unexpected datagram version number#012 (source IP = 10.47.86.147) 00-09-00-10-<*>-07-BF-73-28-59-CE-46-4A-24-2D-2C-18-00#01200-01-01-00-00-03-C4-01-20-00-0D-00-0A-00-04-00#0120E-00-04-00-02-00-08-00-01-00-08-00-16-00-04-00#01215-00-04-00-04-00-01-00-05-00-01-00-37-00-01-00#01234-00-01-00-08-00-04-00-0C-00-04-01-5F-00-08-01#01224-00-0F-00-0A-00-04-00-0E-00-04-00-02-00-08-00#01201-00-08-00-16-00-04-00-15-00-04-00-04-00-01-00#01205-00-01-00-37-00-01-00-34-00-01-00-08-00-04-00#0120C-00-04-00-07-00-02-00-0B-00-02-01-5F-00-08-01#0122 Sep 29 15:10:43 netflow sfcapd[44715]: SFLOW: caught exception: 2 Sep 29 15:13:21 netflow sfcapd[44715]: SFLOW: unexpected datagram version number#012 (source IP = 10.47.86.147) 00-09-00-0C-<*>-07-C1-DC-D0-59-CE-46-E8-24-2D-2C-19-00#01200-01-01-01-0C-00-D4-00-00-32-CA-00-00-27-0E-00#01200-00-00-00-00-00-03-00-00-00-00-00-00-00-F6-07#012BD-35-54-07-BE-04-52-06-C0-C0-01-C1-AF-49-D6-C1#012AF-49-02-86-D1-00-B3-C1-AF-49-02-00-00-32-CA-00#01200-27-0E-00-00-00-00-00-00-00-06-00-00-00-00-00#01200-01-EC-07-BD-A2-0A-07-BE-8D-0A-06-C0-C0-01-C1#012AF-49-C8-C1-AF-49-02-D3-1D-00-B3-C1-AF-49-02-00#01200-32-CA-00-00-27-0E-00-00-00-00-00-00-00-06-00#0120 Sep 29 15:13:21 netflow sfcapd[44715]: SFLOW: caught exception: 2 Sep 29 15:15:00 netflow sfcapd[44715]: Ident: 'rouxwin' Flows: 35120, Packets: 35962880, Bytes: 33984285696, Sequence Errors: 0, Bad Packets: 0 Sep 29 15:15:00 netflow sfcapd[44715]: Total ignored packets: 0 Should we worry? What is "unexpected datagram version number#012"? -- Ralf Hildebrandt Charite Universitätsmedizin Berlin ralf.hildebra...@charite.de Campus Benjamin Franklin https://www.charite.de Hindenburgdamm 30, 12203 Berlin Geschäftsbereich IT, Abt. Netzwerk fon: +49-30-450.570.155 ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ Nfdump-discuss mailing list Nfdump-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
