The usual way to find things in ntop is to grep for the message to see how
it's being created:
safe_snprintf(__FILE__, __LINE__, buf, sizeof(buf),
"<tr " TR_ON ">\n"
"<th " TH_BG " align=\"left\" "DARK_BG ">Number of Packets
with Bad Version</th>\n"
"<td " TD_BG " align=\"right\">%s</td>\n"
"</tr>\n",
formatPkts(myGlobals.device[deviceId].sflowGlobals->numBadsFlowsVersionsRcvd
, formatBuf, sizeof(formatBuf)));
sendString(buf);
Which tells us what counter is being reported. Looking for
"numBadsFlowsVersionsRcvd" gives this:
/* check the version */
sample->datagramVersion = getData32(sample, deviceId);
switch(sample->datagramVersion) {
case 2:
myGlobals.device[deviceId].sflowGlobals->numsFlowsV2Rcvd++;
break;
case 4:
myGlobals.device[deviceId].sflowGlobals->numsFlowsV4Rcvd++;
break;
case 5:
myGlobals.device[deviceId].sflowGlobals->numsFlowsV5Rcvd++;
break;
default:
myGlobals.device[deviceId].sflowGlobals->numBadsFlowsVersionsRcvd++;
break;
}
So ntop is seeing sFlow packets with a version outside of the 2, 4 or 5 it
understands.
-----Burton
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
[EMAIL PROTECTED]
Sent: Monday, April 04, 2005 8:28 AM
To: [email protected]
Subject: [Ntop] Number of Packets with Bad Version
Hello,
I've activated sFlow on my Ntop and would like to have more information
about the following that appears at the end of the sFlow plugins page:
Number of Packets Received 768
Number of Packets with Bad Version 768
What "Number of Packets with Bad Version" mean exactly and why this happen?
Regards,
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
