Comments (4)
This error means, that the expected input length of the data does not match, what the template announces. The sequencer is the programmable data processor which moves input data to the output stream.
The traffic speed should not be the reason for that.
How often do you see this message? Rarely or did you get flooded by those?
Do the flow records looks correct, which are stored otherwise?
Have you tried to evaluate, if it’s a specific source - just one or several of those 30 sources?
from nfdump.
How often do you see this message? Rarely or did you get flooded by those?
Often, several messages per second
Do the flow records looks correct, which are stored otherwise?
Can't check all archive, and error appeared just recently, but if i find something, i'll let know.
Have you tried to evaluate, if it’s a specific source - just one or several of those 30 sources?
It's good question. After limiting by firewall netflow packets only from "known good" sources (same location) error is gone (just half a day passed, but...). Now i'm inspecting remaining (remote) sources.
from nfdump.
During the check, I discovered a router with an incorrectly configured NAT along the route of netflow packets. After correcting the NAT configuration, the nfcapd errors also gone (it looks like the packets were somehow damaged or modified). So, i think this issue are resolved.
It will be helpful, if log message will contain ip address of associated source, diagnostics and debug will be faster and easier.
from nfdump.
You are certainly right. I will improve the diagnostics. Many thanks for the input.
from nfdump.
Related Issues (20)
- AS Information HOT 1
- PBlock variables are not printing properly with custom format.
- Bad magic 0x10CF HOT 4
- Runnng nfcapd/sfcapd simultaneously in WSL segfaults... HOT 8
- issues after upgrade - lz4 compression stopped working HOT 10
- nfdump - help/error text for compression argument HOT 1
- nfcapd 1.7.4 - Segmentation Fault HOT 1
- Missing json format in statistic mode HOT 4
- Missing output format for aggregation mode. HOT 4
- Nokia BNG NAT logging support HOT 11
- Invalid order in aggregation mode.
- IPv6/4 address aggregation errors HOT 2
- Aggregation - duplicate entries for router HOT 1
- Strange output for ip4 aggregation with ipv6 filter HOT 2
- nfdump repository HOT 1
- Error while loading shared libraries: libnffile-1.7.4.so: cannot open shared object file: No such file or directory HOT 1
- FYI : warning on compile time ‘long unsigned int’, but argument 3 has type ‘uint64_t’ {aka ‘long unsigned int’} [-Wformat=] HOT 1
- Format time Issue of Netflow data in NFDump HOT 4
- Request: Add TTL field HOT 7
- Typo in nfdump json output: observationDoaminID
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from nfdump.