-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Dear all,


(I have send this message already, about two months ago, to the wrong
mail-list. I will give it another try.)

After downloading and compiling and installing the lates Ntop from svn
and configuring two NetFlow interfaces I see a lot of "**WARNING**
Template len mismatch" and sometimes a "**WARNING** Template <number>
has wrong size" messages in the syslog.

I have captured with tshark the netflowdata in a period that caused the
warning messages (1.7MB).
The two netflowstreams comes from two Cisco 6509 with sub 720-3B running
IOS version 12.2SXI

In August 2008 Janaka reported the same issue. Luca responded with the
question to send some netflow packets.

If you want I can send you de capture file.



Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
[tot_len=52][flow_len=56]
Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
[tot_len=52][flow_len=56]
Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
[tot_len=52][flow_len=56]
Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
[tot_len=52][flow_len=56]
Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
[tot_len=52][flow_len=56]
Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
[tot_len=52][flow_len=56]
Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
[tot_len=52][flow_len=56]
Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
[tot_len=52][flow_len=56]
Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
[tot_len=52][flow_len=56]
Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
[tot_len=52][flow_len=56]
Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
[tot_len=52][flow_len=56]
Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
[tot_len=52][flow_len=56]
Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
[tot_len=52][flow_len=56]
Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
[tot_len=52][flow_len=56]
Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
[tot_len=52][flow_len=56]
Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
[tot_len=52][flow_len=56]
Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
[tot_len=52][flow_len=56]
Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
[tot_len=52][flow_len=56]
Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
[tot_len=52][flow_len=56]
Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
[tot_len=52][flow_len=56]
Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
[tot_len=52][flow_len=56]
Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
[tot_len=52][flow_len=56]
Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
[tot_len=52][flow_len=56]
Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
[tot_len=52][flow_len=56]
Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
[tot_len=52][flow_len=56]
Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
[tot_len=52][flow_len=56]
Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
[tot_len=52][flow_len=56]
Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
[tot_len=52][flow_len=56]
Mon May 11 15:03:13 2009  **WARNING** Template len mismatch
[tot_len=52][flow_len=56]
Mon May 11 15:03:13 2009  **WARNING** Template len mismatch
[tot_len=52][flow_len=56]
Mon May 11 15:03:13 2009  **WARNING** Template len mismatch
[tot_len=52][flow_len=56]
Mon May 11 15:03:13 2009  **WARNING** Template len mismatch
[tot_len=52][flow_len=56]
Mon May 11 15:03:13 2009  **WARNING** Template len mismatch
[tot_len=52][flow_len=56]
Mon May 11 15:03:13 2009  **WARNING** Template len mismatch
[tot_len=52][flow_len=56]
Mon May 11 15:03:13 2009  **WARNING** Template len mismatch
[tot_len=52][flow_len=56]
Mon May 11 15:03:13 2009  **WARNING** Template len mismatch
[tot_len=52][flow_len=56]
Mon May 11 15:03:13 2009  **WARNING** Template len mismatch
[tot_len=52][flow_len=56]
Mon May 11 15:03:13 2009  **WARNING** Template len mismatch
[tot_len=52][flow_len=56]
Mon May 11 15:03:13 2009  **WARNING** Template len mismatch
[tot_len=52][flow_len=56]
Mon May 11 15:03:13 2009  **WARNING** Template len mismatch
[tot_len=52][flow_len=56]
Mon May 11 15:03:13 2009  **WARNING** Template len mismatch
[tot_len=52][flow_len=56]
Mon May 11 15:03:13 2009  **WARNING** Template len mismatch
[tot_len=1356][flow_len=1396]
Mon May 11 15:03:14 2009  **WARNING** Template 257 has wrong size
[actual=8/expected=0]: skipped
Mon May 11 15:03:14 2009  **WARNING** Template len mismatch
[tot_len=1356][flow_len=1396]
Mon May 11 15:03:14 2009  **WARNING** Template len mismatch
[tot_len=4][flow_len=18]


- --

Roel Hoek
ICT Service Centre
University of Twente, P.O.Box 217, 7500 AE Enschede, The Netherlands
Telephone +31 53 489 4598, Fax +31 53 489 2383
[email protected]; http://www.utwente.nl/icts



-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkoIJ2wACgkQJwlRSGnYBcbpOwCfUaGq89DpewwAt92+YL/mI8VN
ViEAnierk+On7lSB0CcwYUBPZuWu+tAC
=e135
-----END PGP SIGNATURE-----
_______________________________________________
Ntop-dev mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-dev

Reply via email to