Am 09.08.21 um 15:41 schrieb Brian Candler: >> I have here nfcapd files bigger than two gigabytes. >> >> Looks like nfdump is not able to process them. >> Am I right? > > It is plausible, given that 2 GB = 2^31, so you may be hitting some 32-bit > limitation somewhere.
The funny thing is that nfcapd writes them flawlessly > * What version of nfdump/nfcapd are you using? nfdump: Version: NSEL-NEL1.6.22 > * What operating system are you running it under? Is it i386 or x86_64? Linux graph-2.rz.rwth-aachen.de 3.10.0-1160.36.2.el7.x86_64 #1 SMP Wed Jul 21 11:57:15 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux (CentOS 7) > * What happens when you run nfdump on a >2GB file? Do you get a crash, an > error message, something else? Can you share what you see? I am using typically nfsen to look at flows. Today it simply hang. At the moment the system is rebooting, I was not able to kill the hanging processes. I hoped, someone had observed the already ... Maybe it is not 2GB related, I am looking into the IPv6 flows ... _______________________________________________ Nfsen-discuss mailing list Nfsen-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
