Hello all, This post is regarding Huawei Netstream and nfdump with incorrect data being shown in the flow data. Had a look in the list for any posts regarding compatibility between nfdump and Netstream, but the only one showing up is Peter's answer that he needs to look into it (post from May 2013). Problem showing is that the time-stamp in the Netstream V9 packets are 17 days ahead in the nfdump output. Also the bpps stats are sometimes way out, for example showing huge bpps throughput (many Gb/s). This coincides with the flow duration only being 0.060seconds. These are two obvious anomalies, there may be others.
Wireshark traces show that the time-stamp in the Netstream packets is correct. The time on the collector is also correct, which is easily seen by the correct date&time on the nfdump files. Also, the NetstreamV9 packets also look correct, the template is received and subsequent packets have the correct information in them, as far as I can tell anyway. Have tried all the basic troubleshooting like restarting nfsen/nfdump, restarting the Netstream process, also tried NetstreamV5, but same issue. Has anyone come across this using Netstream? Many thanks in advance. @Peter, I can send you the pcaps and nfdump files if needed. Regards, Lambert Hoogeveen ------------------------------------------------------------------------------ Site24x7 APM Insight: Get Deep Visibility into Application Performance APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month Monitor end-to-end web transactions and take corrective actions now Troubleshoot faster and improve end-user experience. Signup Now! http://pubads.g.doubleclick.net/gampad/clk?id=267308311&iu=/4140 _______________________________________________ Nfsen-discuss mailing list Nfsen-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
