Seems that the "Corrupt data file" issue has struck.
nfdump: Version: 1.6.3p1 $LastChangedDate: 2011-02-26 12:49:02 +0100 (Sat, 26 Feb 2011) $
$Id: nfdump.c 69 2010-09-09 07:17:43Z haag $
$Id: nfdump.c 69 2010-09-09 07:17:43Z haag $
/home/jpolache/data/nfsen/bin/nfsen: 1.3.5 $Id: nfsen 68 2010-09-09 06:04:17Z haag $
SUSE Linux Enterprise Server 10 (i586)
VERSION = 10
PATCHLEVEL = 3
The server is running as a vmware V3 image
VERSION = 10
PATCHLEVEL = 3
The server is running as a vmware V3 image
This is perl, v5.8.8 built for i586-linux-thread-multi
** nfdump -M /home/jpolache/data/nfsen/profiles-data/live/OC12 -T -R 2011/07/21/nfcapd.201107211705:2011/07/21/nfcapd.201107212105 -n 10 -s ip/bytesnfdump filter:(( ident OC12) and (! port 8888 and ! port 3225))Corrupt data file. Missing extension map 1. Skip record.Corrupt data file. Missing extension map 1. Skip record.Corrupt data file. Missing extension map 1. Skip record.
<snip>
Corrupt data file. Missing extension map 0. Skip record.Corrupt data file. Missing extension map 0. Skip record.Top 10 IP Addr ordered by bytes:Date first seen Duration Proto IP Addr Flows(%) Packets(%) Bytes(%) pps bps bpp2011-06-02 03:18:43.044 4297178.213 any xxxxx 173( 0.0) 368.7 M(90.9) 330.2 G(93.2) 85 614663 8952011-06-02 03:18:43.044 4297178.213 any xxxxx 173( 0.0) 368.7 M(90.9) 330.2 G(93.2) 85 614663 8952011-06-01 23:58:56.444 4309230.165 any xxxxx 8002( 0.7) 9.0 M( 2.2) 4.8 G( 1.4) 2 8973 5352011-06-02 00:05:44.696 4308813.458 any xxxxx 3611( 0.3) 3.8 M( 0.9) 3.5 G( 1.0) 0 6409 9062011-07-21 17:06:09.978 13461.214 any xxxxx 26( 0.0) 3.5 M( 0.9) 3.4 G( 1.0) 258 2.0 M 9772011-06-02 00:19:49.490 4307968.664 any xxxxx 5918( 0.5) 3.3 M( 0.8) 3.0 G( 0.9) 0 5628 9292011-06-01 23:57:50.325 4309294.096 any xxxxx 60617( 5.3) 2.5 M( 0.6) 2.6 G( 0.7) 0 4904 10422011-06-01 23:57:46.869 4309296.020 any xxxxx 59363( 5.2) 1.9 M( 0.5) 2.4 G( 0.7) 0 4425 12262011-06-01 23:59:06.357 4309218.905 any xxxxx 13686( 1.2) 2.4 M( 0.6) 1.8 G( 0.5) 0 3330 7352011-07-21 17:07:48.074 13593.900 any xxxxx 34( 0.0) 2.1 M( 0.5) 1.6 G( 0.5) 151 965537 795Summary: total flows: 1145074, total bytes: 354.4 G, total packets: 405.7 M, avg bps: 657803, avg pps: 94, avg bpp: 873Time window: 2011-06-01 23:51:31 - 2011-07-21 20:59:27Total flows processed: 1155003, Blocks skipped: 0, Bytes read: 60592960Sys: 1.048s flows/second: 1102034.8 Wall: 4.451s flows/second: 259483.8Any suggestions?Thanks,Jonathan
------------------------------------------------------------------------------ 10 Tips for Better Web Security Learn 10 ways to better secure your business today. Topics covered include: Web security, SSL, hacker attacks & Denial of Service (DoS), private keys, security Microsoft Exchange, secure Instant Messaging, and much more. http://www.accelacomm.com/jaw/sfnl/114/51426210/
_______________________________________________ Nfsen-discuss mailing list Nfsen-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
