Hi list, I just uploaded nfdump-1.6.3p1. This is a minor bug fix and is recommended, if one of the topics below apply to your environment.
1.6.3p1 fixes: - Fix potential sequence error in combination with v7 flow data - Fix timefix bug - make it a compile time option --enable-fixtimebug * Some users report, that they see flows, which have duration time of * about 40days which is almost the v5 overflow value. However looking * in the raw data, it cannot be the classic 32bit v5 overflow and the * difference between Fist/Last is always 15160 or 15176 msec - too * little for a classical overflow. Therefore I assume this must be an * exporter bug in an IOS version .. * This issue was not correctly addressed in 1.6.3. This fix is now a * compile option and no longer enabled by default. * Use --enable-fixtimebug to enable this check in v5 - Zero out unused fields when doing aggregation. - Fix 2 byte sampler ID in v9 tag #48 for ASR IOS-XR There is also a patch available: <https://sourceforge.net/tracker/?func=detail&aid=3193281&group_id=119350&atid=683754> Regards - Peter -- Be nice to your netflow data. Use NfSen and nfdump :) ------------------------------------------------------------------------------ Free Software Download: Index, Search & Analyze Logs and other IT data in Real-Time with Splunk. Collect, index and harness all the fast moving IT data generated by your applications, servers and devices whether physical, virtual or in the cloud. Deliver compliance at lower cost and gain new business insights. http://p.sf.net/sfu/splunk-dev2dev _______________________________________________ Nfsen-discuss mailing list Nfsen-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
