Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: NTop: Users

Problem with sflow plugin

 

 

NTop users RSS feed   Index | Next | Previous | View Threaded


s.priebe at allied-internet

Oct 15, 2009, 3:57 AM

Post #1 of 9 (885 views)
Permalink
Problem with sflow plugin

Hi!

I've installed ntop from SVN and configured the sflow plugin. Now i get
thousand of messages like this:
SFABORT: 2
SFABORT: 1
unrecognized extended data tag (source IP = 225.179.158.85)
00-00-00-02-00-00-00-01-55-9E-B3-01-00-73-E5-FE-9C
FB-BF-AC-00-00-00-06-00-00-00-01-02-CB-BB-80-00
00-00-02-00-00-02-00-A5-6D-AE-00-00-00-00-00-00
00-00-02-00-00-00-03-00-00-00-01-00-00-00-01-00
00-00-38-00-00-00-38-00-14-22-15-DB-0C-00-12-1E
00-2F-F0-08-00-45-00-00-28-7D-8C-40-00-79-06-D0
51-C1-64-E5-01-55-9E-B7-ED-04-98-00-50-FB-20-F2
B5-B7-AB-6D-1E-50-10-FF-FF-E4-59-00-00-E4-00-00
00-00-03-00-00-00-01-00-00-00-64-00-00-00-00-00
00-01-2C-00-00-00-00-00-00-00-02-00-00-00-01-55
9E-B3-16-00-00-00-16-00-00-00-18-00-00-00-03-00
00-86-80-00-00-0C-89-00-00-60-67-00-00-00-00-00
00-00-01-02-CB-BB-81-00-00-00-02-00-00-02-00-A5
6D-B0-00-00-00-00-00-00-00-00-02-00-00-00-04-00
00-00-01-00-00-00-01-00-00-00-42-00-00-00-42-00
E0-81-46-49-84-00-12-1E-00-2F-F0-08-00-45-00-00
34-EC-4E-40-00-37-06-3E-8B-54-72-B9-CA-55-9E-B5
0F-F3-81-00-6E-B4-DB-5C-08-E7-3F-1C-5B-80-10-FF
FF-7C-0D-00-00-01-01-08-0A-08-25-46-98-2A-F2-5F
A7-00-01-00-00-00-03-00-00-00-01-00-00-00-64-00
00-00-00-00-00-03-E8-00-00-00-00-00-00-00-02-00
00-00-01-55-9E-B5-0F-00-00-00-0E-00-00-00-18-00
00-00-03-00-00-86-80-00-00-1A-AE-00-00-60-67-00
00-00-00-00-00-00-01-02-CB-BB-82-00-00-00-02-00
00-02-00-A5-6D-B2-00-00-00-00-00-00-00-00-02-00
00-00-04-00-00-00-01-00-00-00-01-00-00-05-EA-00
00-00-80-00-E0-81-33-A6-76-00-12-1E-00-2F-F0-08
00-45-00-05-DC-91-73-00-00-38-06-A6-AB-5B-70-DE
DA-55-9E-B5-14-71-01-00-19-91-95-B1-4A-D8-E6-B8
5D-80-10-44-70-00-3D-00-00-01-01-08-0A-00-07-B8
99-2A-B7-8C-3D-69-39-78-45-39-75-39-76-4E-62-6B
42-31-59-35-35-4F-65-6E-35-56-70-55-41-59-50-39
6A-36-73-65-75-75-53-66-39-2B-76-2F-41-4B-39-4B
64-44-76-5A-45-5A-4A-64-5A-6E-64-48-55-71-77-32
0D-0A-44-00-00-00-03-00-00-00-01-00-00-00-64-00
00-00-00-00-00-03-E8-00-00-00-00-00-00-00-02-00
00-00-01-55-9E-B5-14-00-00-00-0E-00-00-00-18-00
00-00-03-00-00-86-80-00-00-20-FF-00-00-60-67-00
00-00-00-00-00-00-01-02-CB-BB-83-00-00-00-02-00
00-02-00-A5-6D-B4-00-00-00-00-00-00-00-00-02-00
00-00-04-00-00-00-01-00-00-00-01-00-00-05-47-00
00-00-80-00-00-5E-00-01-C9-00-12-1E-00-2F-F0-08
00-45-00-05-39-09-57-40-00-75-06-CB-C0-57-B0-C8
40-55-9E-B6-18-C3-5C-00-50-01-34-EE-ED-E2-FE-4F
80-50-18-10-10-93-0C-00-00-47-45-54-20-2F-77-77
77-2F-64-65-6C-69-76-65-72-79-2F-6C-67-2E-70-68
70-3F-62-61-6E-6E-65-72-69-64-3D-33-31-38-26-63
61-6D-70-61-69-67-6E-69-64-3D-32-38-31-26-7A-6F
6E-65-69-64-3D-36-35-26-6C-6F-63-3D-68-74-74-70
25-33-41-00-00-00-03-00-00-00-01-00-00-00-64-00
00-00-00-00-00-03-EA-00-00-00-00-00-00-00-02-00
00-00-01-55-9E-B6-18-00-00-00-0A-00-00-00-19-00
00-00-03-00-00-86-80-00-00-0C-F8-00-00-60-67-00
00-00-00-00-00-00-01-02-CB-BB-84-00-00-00-02-00
00-02-00-A5-6D-B6-00-00-00-00-00-00-00-00-02-00
00-00-03-00-00-00-01-00-00-00-01-00-00-00-3E-00
00-00-3E-00-14-22-15-DB-0C-00-12-1E-00-2F-F0-08
00-45-00-00-30-33-7A-40-00-6F-06-4D-19-4C-EF-34
39-55-9E-B4-6E-07-99-00-50-4E-06-43-DA-00-00-00
00-70-02-FF-FF-5E-55-00-00-02-04-05-80-01-01-04
02-20-FF-00-00-00-03-00-00-00-01-00-00-00-64-00
00-00-00-00-00-01-2C-00-00-00-00-00-00-00-02-00
00-00-01-55-9E-B3-16-00-00-00-0B-00-00-00-1A-00
00-00-03-00-00-86-80-00-00-1B-DC-00-00-60-67-00
00-00-00-00-00-00-01-02-CB-BB-85-00-00-00-02-00
00-02-00-A5-6D-B8-00-00-00-00-00-00-00-00-02-00
00-00-04-00-00-00-01-00-00-00-01-00-00-01-D9-00
00-00-80-00-30-48-D5-17-DA-00-12-1E-00-2F-F0-08
00-45-00-01-CB-20-84-40-00-7A-06-D0-6D-50-78-B3
0A-55-9E-B5-1A-BD-02-00-50-79-3E-E5-68-A9-92-9F
AF-50-18-FF-FF-25-52-00-00-47-45-54-20-2F-67-61
72-62-61-67-65-2F-35-39-2F-35-39-39-35-30-30-2F
74-72-65-65-2F-34-38-33-33-33-39-30-5F-31-35-35
32-33-34-32-37-35-30-2E-70-6E-67-20-48-54-54-50
2F-31-2E-31-0D-0A-56-69-61-3A-20-31-2E-31-20-53
43-43-57-00-00-00-03-00-00-00-01-00-00-00-64-00
00-00-00-00-00-03-E8-00-00-00-00-00-00-00-02-00
00-00-01-55-9E-B5-1A-00-00-00-0E-00-00-00-18-00
00-00-03-00-00-86-80-00-00-20-FF-00-00-60-67-00
00-00-00

225.179.158.85 is an mcast address what is this about? Also it does not
matter if i change the port. This message is always the same.

Stefan
_______________________________________________
Ntop mailing list
Ntop [at] listgateway
http://listgateway.unipi.it/mailman/listinfo/ntop


Haoying.Liu at iongeo

Oct 15, 2009, 8:15 AM

Post #2 of 9 (834 views)
Permalink
Re: Problem with sflow plugin [In reply to]

Hi Stefan,
I'm also having problem with sflow plugin. When I run it in daemon mode (/usr/local/bin/ntop -d -L -u ntop -P /usr/local/var/ntop --skip-version-check --use-syslog=daemon), I got tons of error of:
flow_sample_element length error (expected 0, found 4)
sometimes
counter_sample_element length error (expected 0, found 4)

If I don't run it in daemon mode, I got:
flow_sample_element length error (expected 0, found 4)
SFABORT: 3
SFABORT: 1

What sflow source are you using? I am using Juniper EX switches.

Thanks,
Haoying

-----Original Message-----
From: ntop-bounces [at] listgateway [mailto:ntop-bounces [at] listgateway] On Behalf Of Stefan Priebe - allied internet ag
Sent: Thursday, October 15, 2009 5:57 AM
To: ntop [at] listgateway
Subject: [Ntop] Problem with sflow plugin

Hi!

I've installed ntop from SVN and configured the sflow plugin. Now i get
thousand of messages like this:
SFABORT: 2
SFABORT: 1
unrecognized extended data tag (source IP = 225.179.158.85)
00-00-00-02-00-00-00-01-55-9E-B3-01-00-73-E5-FE-9C
FB-BF-AC-00-00-00-06-00-00-00-01-02-CB-BB-80-00
00-00-02-00-00-02-00-A5-6D-AE-00-00-00-00-00-00
00-00-02-00-00-00-03-00-00-00-01-00-00-00-01-00
00-00-38-00-00-00-38-00-14-22-15-DB-0C-00-12-1E
00-2F-F0-08-00-45-00-00-28-7D-8C-40-00-79-06-D0
51-C1-64-E5-01-55-9E-B7-ED-04-98-00-50-FB-20-F2
B5-B7-AB-6D-1E-50-10-FF-FF-E4-59-00-00-E4-00-00
00-00-03-00-00-00-01-00-00-00-64-00-00-00-00-00
00-01-2C-00-00-00-00-00-00-00-02-00-00-00-01-55
9E-B3-16-00-00-00-16-00-00-00-18-00-00-00-03-00
00-86-80-00-00-0C-89-00-00-60-67-00-00-00-00-00
00-00-01-02-CB-BB-81-00-00-00-02-00-00-02-00-A5
6D-B0-00-00-00-00-00-00-00-00-02-00-00-00-04-00
00-00-01-00-00-00-01-00-00-00-42-00-00-00-42-00
E0-81-46-49-84-00-12-1E-00-2F-F0-08-00-45-00-00
34-EC-4E-40-00-37-06-3E-8B-54-72-B9-CA-55-9E-B5
0F-F3-81-00-6E-B4-DB-5C-08-E7-3F-1C-5B-80-10-FF
FF-7C-0D-00-00-01-01-08-0A-08-25-46-98-2A-F2-5F
A7-00-01-00-00-00-03-00-00-00-01-00-00-00-64-00
00-00-00-00-00-03-E8-00-00-00-00-00-00-00-02-00
00-00-01-55-9E-B5-0F-00-00-00-0E-00-00-00-18-00
00-00-03-00-00-86-80-00-00-1A-AE-00-00-60-67-00
00-00-00-00-00-00-01-02-CB-BB-82-00-00-00-02-00
00-02-00-A5-6D-B2-00-00-00-00-00-00-00-00-02-00
00-00-04-00-00-00-01-00-00-00-01-00-00-05-EA-00
00-00-80-00-E0-81-33-A6-76-00-12-1E-00-2F-F0-08
00-45-00-05-DC-91-73-00-00-38-06-A6-AB-5B-70-DE
DA-55-9E-B5-14-71-01-00-19-91-95-B1-4A-D8-E6-B8
5D-80-10-44-70-00-3D-00-00-01-01-08-0A-00-07-B8
99-2A-B7-8C-3D-69-39-78-45-39-75-39-76-4E-62-6B
42-31-59-35-35-4F-65-6E-35-56-70-55-41-59-50-39
6A-36-73-65-75-75-53-66-39-2B-76-2F-41-4B-39-4B
64-44-76-5A-45-5A-4A-64-5A-6E-64-48-55-71-77-32
0D-0A-44-00-00-00-03-00-00-00-01-00-00-00-64-00
00-00-00-00-00-03-E8-00-00-00-00-00-00-00-02-00
00-00-01-55-9E-B5-14-00-00-00-0E-00-00-00-18-00
00-00-03-00-00-86-80-00-00-20-FF-00-00-60-67-00
00-00-00-00-00-00-01-02-CB-BB-83-00-00-00-02-00
00-02-00-A5-6D-B4-00-00-00-00-00-00-00-00-02-00
00-00-04-00-00-00-01-00-00-00-01-00-00-05-47-00
00-00-80-00-00-5E-00-01-C9-00-12-1E-00-2F-F0-08
00-45-00-05-39-09-57-40-00-75-06-CB-C0-57-B0-C8
40-55-9E-B6-18-C3-5C-00-50-01-34-EE-ED-E2-FE-4F
80-50-18-10-10-93-0C-00-00-47-45-54-20-2F-77-77
77-2F-64-65-6C-69-76-65-72-79-2F-6C-67-2E-70-68
70-3F-62-61-6E-6E-65-72-69-64-3D-33-31-38-26-63
61-6D-70-61-69-67-6E-69-64-3D-32-38-31-26-7A-6F
6E-65-69-64-3D-36-35-26-6C-6F-63-3D-68-74-74-70
25-33-41-00-00-00-03-00-00-00-01-00-00-00-64-00
00-00-00-00-00-03-EA-00-00-00-00-00-00-00-02-00
00-00-01-55-9E-B6-18-00-00-00-0A-00-00-00-19-00
00-00-03-00-00-86-80-00-00-0C-F8-00-00-60-67-00
00-00-00-00-00-00-01-02-CB-BB-84-00-00-00-02-00
00-02-00-A5-6D-B6-00-00-00-00-00-00-00-00-02-00
00-00-03-00-00-00-01-00-00-00-01-00-00-00-3E-00
00-00-3E-00-14-22-15-DB-0C-00-12-1E-00-2F-F0-08
00-45-00-00-30-33-7A-40-00-6F-06-4D-19-4C-EF-34
39-55-9E-B4-6E-07-99-00-50-4E-06-43-DA-00-00-00
00-70-02-FF-FF-5E-55-00-00-02-04-05-80-01-01-04
02-20-FF-00-00-00-03-00-00-00-01-00-00-00-64-00
00-00-00-00-00-01-2C-00-00-00-00-00-00-00-02-00
00-00-01-55-9E-B3-16-00-00-00-0B-00-00-00-1A-00
00-00-03-00-00-86-80-00-00-1B-DC-00-00-60-67-00
00-00-00-00-00-00-01-02-CB-BB-85-00-00-00-02-00
00-02-00-A5-6D-B8-00-00-00-00-00-00-00-00-02-00
00-00-04-00-00-00-01-00-00-00-01-00-00-01-D9-00
00-00-80-00-30-48-D5-17-DA-00-12-1E-00-2F-F0-08
00-45-00-01-CB-20-84-40-00-7A-06-D0-6D-50-78-B3
0A-55-9E-B5-1A-BD-02-00-50-79-3E-E5-68-A9-92-9F
AF-50-18-FF-FF-25-52-00-00-47-45-54-20-2F-67-61
72-62-61-67-65-2F-35-39-2F-35-39-39-35-30-30-2F
74-72-65-65-2F-34-38-33-33-33-39-30-5F-31-35-35
32-33-34-32-37-35-30-2E-70-6E-67-20-48-54-54-50
2F-31-2E-31-0D-0A-56-69-61-3A-20-31-2E-31-20-53
43-43-57-00-00-00-03-00-00-00-01-00-00-00-64-00
00-00-00-00-00-03-E8-00-00-00-00-00-00-00-02-00
00-00-01-55-9E-B5-1A-00-00-00-0E-00-00-00-18-00
00-00-03-00-00-86-80-00-00-20-FF-00-00-60-67-00
00-00-00

225.179.158.85 is an mcast address what is this about? Also it does not
matter if i change the port. This message is always the same.

Stefan
_______________________________________________
Ntop mailing list
Ntop [at] listgateway
http://listgateway.unipi.it/mailman/listinfo/ntop


This email and any files transmitted with it are confidential and are intended solely for the use of the individual or entity to whom they are addressed. If you are not the original recipient or the person responsible for delivering the email to the intended recipient, be advised that you have received this email in error, and that any use, dissemination, forwarding, printing, or copying of this email is strictly prohibited. If you received this email in error, please immediately notify the sender and delete the original.

_______________________________________________
Ntop mailing list
Ntop [at] listgateway
http://listgateway.unipi.it/mailman/listinfo/ntop


Haoying.Liu at iongeo

Oct 15, 2009, 8:15 AM

Post #3 of 9 (834 views)
Permalink
Re: Problem with sflow plugin [In reply to]

Hi Stefan,
I'm also having problem with sflow plugin. When I run it in daemon mode (/usr/local/bin/ntop -d -L -u ntop -P /usr/local/var/ntop --skip-version-check --use-syslog=daemon), I got tons of error of:
flow_sample_element length error (expected 0, found 4)
sometimes
counter_sample_element length error (expected 0, found 4)

If I don't run it in daemon mode, I got:
flow_sample_element length error (expected 0, found 4)
SFABORT: 3
SFABORT: 1

What sflow source are you using? I am using Juniper EX switches.

Thanks,
Haoying

-----Original Message-----
From: ntop-bounces [at] listgateway [mailto:ntop-bounces [at] listgateway] On Behalf Of Stefan Priebe - allied internet ag
Sent: Thursday, October 15, 2009 5:57 AM
To: ntop [at] listgateway
Subject: [Ntop] Problem with sflow plugin

Hi!

I've installed ntop from SVN and configured the sflow plugin. Now i get
thousand of messages like this:
SFABORT: 2
SFABORT: 1
unrecognized extended data tag (source IP = 225.179.158.85)
00-00-00-02-00-00-00-01-55-9E-B3-01-00-73-E5-FE-9C
FB-BF-AC-00-00-00-06-00-00-00-01-02-CB-BB-80-00
00-00-02-00-00-02-00-A5-6D-AE-00-00-00-00-00-00
00-00-02-00-00-00-03-00-00-00-01-00-00-00-01-00
00-00-38-00-00-00-38-00-14-22-15-DB-0C-00-12-1E
00-2F-F0-08-00-45-00-00-28-7D-8C-40-00-79-06-D0
51-C1-64-E5-01-55-9E-B7-ED-04-98-00-50-FB-20-F2
B5-B7-AB-6D-1E-50-10-FF-FF-E4-59-00-00-E4-00-00
00-00-03-00-00-00-01-00-00-00-64-00-00-00-00-00
00-01-2C-00-00-00-00-00-00-00-02-00-00-00-01-55
9E-B3-16-00-00-00-16-00-00-00-18-00-00-00-03-00
00-86-80-00-00-0C-89-00-00-60-67-00-00-00-00-00
00-00-01-02-CB-BB-81-00-00-00-02-00-00-02-00-A5
6D-B0-00-00-00-00-00-00-00-00-02-00-00-00-04-00
00-00-01-00-00-00-01-00-00-00-42-00-00-00-42-00
E0-81-46-49-84-00-12-1E-00-2F-F0-08-00-45-00-00
34-EC-4E-40-00-37-06-3E-8B-54-72-B9-CA-55-9E-B5
0F-F3-81-00-6E-B4-DB-5C-08-E7-3F-1C-5B-80-10-FF
FF-7C-0D-00-00-01-01-08-0A-08-25-46-98-2A-F2-5F
A7-00-01-00-00-00-03-00-00-00-01-00-00-00-64-00
00-00-00-00-00-03-E8-00-00-00-00-00-00-00-02-00
00-00-01-55-9E-B5-0F-00-00-00-0E-00-00-00-18-00
00-00-03-00-00-86-80-00-00-1A-AE-00-00-60-67-00
00-00-00-00-00-00-01-02-CB-BB-82-00-00-00-02-00
00-02-00-A5-6D-B2-00-00-00-00-00-00-00-00-02-00
00-00-04-00-00-00-01-00-00-00-01-00-00-05-EA-00
00-00-80-00-E0-81-33-A6-76-00-12-1E-00-2F-F0-08
00-45-00-05-DC-91-73-00-00-38-06-A6-AB-5B-70-DE
DA-55-9E-B5-14-71-01-00-19-91-95-B1-4A-D8-E6-B8
5D-80-10-44-70-00-3D-00-00-01-01-08-0A-00-07-B8
99-2A-B7-8C-3D-69-39-78-45-39-75-39-76-4E-62-6B
42-31-59-35-35-4F-65-6E-35-56-70-55-41-59-50-39
6A-36-73-65-75-75-53-66-39-2B-76-2F-41-4B-39-4B
64-44-76-5A-45-5A-4A-64-5A-6E-64-48-55-71-77-32
0D-0A-44-00-00-00-03-00-00-00-01-00-00-00-64-00
00-00-00-00-00-03-E8-00-00-00-00-00-00-00-02-00
00-00-01-55-9E-B5-14-00-00-00-0E-00-00-00-18-00
00-00-03-00-00-86-80-00-00-20-FF-00-00-60-67-00
00-00-00-00-00-00-01-02-CB-BB-83-00-00-00-02-00
00-02-00-A5-6D-B4-00-00-00-00-00-00-00-00-02-00
00-00-04-00-00-00-01-00-00-00-01-00-00-05-47-00
00-00-80-00-00-5E-00-01-C9-00-12-1E-00-2F-F0-08
00-45-00-05-39-09-57-40-00-75-06-CB-C0-57-B0-C8
40-55-9E-B6-18-C3-5C-00-50-01-34-EE-ED-E2-FE-4F
80-50-18-10-10-93-0C-00-00-47-45-54-20-2F-77-77
77-2F-64-65-6C-69-76-65-72-79-2F-6C-67-2E-70-68
70-3F-62-61-6E-6E-65-72-69-64-3D-33-31-38-26-63
61-6D-70-61-69-67-6E-69-64-3D-32-38-31-26-7A-6F
6E-65-69-64-3D-36-35-26-6C-6F-63-3D-68-74-74-70
25-33-41-00-00-00-03-00-00-00-01-00-00-00-64-00
00-00-00-00-00-03-EA-00-00-00-00-00-00-00-02-00
00-00-01-55-9E-B6-18-00-00-00-0A-00-00-00-19-00
00-00-03-00-00-86-80-00-00-0C-F8-00-00-60-67-00
00-00-00-00-00-00-01-02-CB-BB-84-00-00-00-02-00
00-02-00-A5-6D-B6-00-00-00-00-00-00-00-00-02-00
00-00-03-00-00-00-01-00-00-00-01-00-00-00-3E-00
00-00-3E-00-14-22-15-DB-0C-00-12-1E-00-2F-F0-08
00-45-00-00-30-33-7A-40-00-6F-06-4D-19-4C-EF-34
39-55-9E-B4-6E-07-99-00-50-4E-06-43-DA-00-00-00
00-70-02-FF-FF-5E-55-00-00-02-04-05-80-01-01-04
02-20-FF-00-00-00-03-00-00-00-01-00-00-00-64-00
00-00-00-00-00-01-2C-00-00-00-00-00-00-00-02-00
00-00-01-55-9E-B3-16-00-00-00-0B-00-00-00-1A-00
00-00-03-00-00-86-80-00-00-1B-DC-00-00-60-67-00
00-00-00-00-00-00-01-02-CB-BB-85-00-00-00-02-00
00-02-00-A5-6D-B8-00-00-00-00-00-00-00-00-02-00
00-00-04-00-00-00-01-00-00-00-01-00-00-01-D9-00
00-00-80-00-30-48-D5-17-DA-00-12-1E-00-2F-F0-08
00-45-00-01-CB-20-84-40-00-7A-06-D0-6D-50-78-B3
0A-55-9E-B5-1A-BD-02-00-50-79-3E-E5-68-A9-92-9F
AF-50-18-FF-FF-25-52-00-00-47-45-54-20-2F-67-61
72-62-61-67-65-2F-35-39-2F-35-39-39-35-30-30-2F
74-72-65-65-2F-34-38-33-33-33-39-30-5F-31-35-35
32-33-34-32-37-35-30-2E-70-6E-67-20-48-54-54-50
2F-31-2E-31-0D-0A-56-69-61-3A-20-31-2E-31-20-53
43-43-57-00-00-00-03-00-00-00-01-00-00-00-64-00
00-00-00-00-00-03-E8-00-00-00-00-00-00-00-02-00
00-00-01-55-9E-B5-1A-00-00-00-0E-00-00-00-18-00
00-00-03-00-00-86-80-00-00-20-FF-00-00-60-67-00
00-00-00

225.179.158.85 is an mcast address what is this about? Also it does not
matter if i change the port. This message is always the same.

Stefan
_______________________________________________
Ntop mailing list
Ntop [at] listgateway
http://listgateway.unipi.it/mailman/listinfo/ntop


This email and any files transmitted with it are confidential and are intended solely for the use of the individual or entity to whom they are addressed. If you are not the original recipient or the person responsible for delivering the email to the intended recipient, be advised that you have received this email in error, and that any use, dissemination, forwarding, printing, or copying of this email is strictly prohibited. If you received this email in error, please immediately notify the sender and delete the original.

_______________________________________________
Ntop mailing list
Ntop [at] listgateway
http://listgateway.unipi.it/mailman/listinfo/ntop


deri at ntop

Oct 15, 2009, 8:18 AM

Post #4 of 9 (833 views)
Permalink
Re: Problem with sflow plugin [In reply to]

Haoying/Stefan
please send me a pcap file (full packets please) containing sflow
packets I can use to reproduce the bug

Thanks Luca

Haoying Liu wrote:
> Hi Stefan,
> I'm also having problem with sflow plugin. When I run it in daemon mode (/usr/local/bin/ntop -d -L -u ntop -P /usr/local/var/ntop --skip-version-check --use-syslog=daemon), I got tons of error of:
> flow_sample_element length error (expected 0, found 4)
> sometimes
> counter_sample_element length error (expected 0, found 4)
>
> If I don't run it in daemon mode, I got:
> flow_sample_element length error (expected 0, found 4)
> SFABORT: 3
> SFABORT: 1
>
> What sflow source are you using? I am using Juniper EX switches.
>
> Thanks,
> Haoying
>
> -----Original Message-----
> From: ntop-bounces [at] listgateway [mailto:ntop-bounces [at] listgateway] On Behalf Of Stefan Priebe - allied internet ag
> Sent: Thursday, October 15, 2009 5:57 AM
> To: ntop [at] listgateway
> Subject: [Ntop] Problem with sflow plugin
>
> Hi!
>
> I've installed ntop from SVN and configured the sflow plugin. Now i get
> thousand of messages like this:
> SFABORT: 2
> SFABORT: 1
> unrecognized extended data tag (source IP = 225.179.158.85)
> 00-00-00-02-00-00-00-01-55-9E-B3-01-00-73-E5-FE-9C
> FB-BF-AC-00-00-00-06-00-00-00-01-02-CB-BB-80-00
> 00-00-02-00-00-02-00-A5-6D-AE-00-00-00-00-00-00
> 00-00-02-00-00-00-03-00-00-00-01-00-00-00-01-00
> 00-00-38-00-00-00-38-00-14-22-15-DB-0C-00-12-1E
> 00-2F-F0-08-00-45-00-00-28-7D-8C-40-00-79-06-D0
> 51-C1-64-E5-01-55-9E-B7-ED-04-98-00-50-FB-20-F2
> B5-B7-AB-6D-1E-50-10-FF-FF-E4-59-00-00-E4-00-00
> 00-00-03-00-00-00-01-00-00-00-64-00-00-00-00-00
> 00-01-2C-00-00-00-00-00-00-00-02-00-00-00-01-55
> 9E-B3-16-00-00-00-16-00-00-00-18-00-00-00-03-00
> 00-86-80-00-00-0C-89-00-00-60-67-00-00-00-00-00
> 00-00-01-02-CB-BB-81-00-00-00-02-00-00-02-00-A5
> 6D-B0-00-00-00-00-00-00-00-00-02-00-00-00-04-00
> 00-00-01-00-00-00-01-00-00-00-42-00-00-00-42-00
> E0-81-46-49-84-00-12-1E-00-2F-F0-08-00-45-00-00
> 34-EC-4E-40-00-37-06-3E-8B-54-72-B9-CA-55-9E-B5
> 0F-F3-81-00-6E-B4-DB-5C-08-E7-3F-1C-5B-80-10-FF
> FF-7C-0D-00-00-01-01-08-0A-08-25-46-98-2A-F2-5F
> A7-00-01-00-00-00-03-00-00-00-01-00-00-00-64-00
> 00-00-00-00-00-03-E8-00-00-00-00-00-00-00-02-00
> 00-00-01-55-9E-B5-0F-00-00-00-0E-00-00-00-18-00
> 00-00-03-00-00-86-80-00-00-1A-AE-00-00-60-67-00
> 00-00-00-00-00-00-01-02-CB-BB-82-00-00-00-02-00
> 00-02-00-A5-6D-B2-00-00-00-00-00-00-00-00-02-00
> 00-00-04-00-00-00-01-00-00-00-01-00-00-05-EA-00
> 00-00-80-00-E0-81-33-A6-76-00-12-1E-00-2F-F0-08
> 00-45-00-05-DC-91-73-00-00-38-06-A6-AB-5B-70-DE
> DA-55-9E-B5-14-71-01-00-19-91-95-B1-4A-D8-E6-B8
> 5D-80-10-44-70-00-3D-00-00-01-01-08-0A-00-07-B8
> 99-2A-B7-8C-3D-69-39-78-45-39-75-39-76-4E-62-6B
> 42-31-59-35-35-4F-65-6E-35-56-70-55-41-59-50-39
> 6A-36-73-65-75-75-53-66-39-2B-76-2F-41-4B-39-4B
> 64-44-76-5A-45-5A-4A-64-5A-6E-64-48-55-71-77-32
> 0D-0A-44-00-00-00-03-00-00-00-01-00-00-00-64-00
> 00-00-00-00-00-03-E8-00-00-00-00-00-00-00-02-00
> 00-00-01-55-9E-B5-14-00-00-00-0E-00-00-00-18-00
> 00-00-03-00-00-86-80-00-00-20-FF-00-00-60-67-00
> 00-00-00-00-00-00-01-02-CB-BB-83-00-00-00-02-00
> 00-02-00-A5-6D-B4-00-00-00-00-00-00-00-00-02-00
> 00-00-04-00-00-00-01-00-00-00-01-00-00-05-47-00
> 00-00-80-00-00-5E-00-01-C9-00-12-1E-00-2F-F0-08
> 00-45-00-05-39-09-57-40-00-75-06-CB-C0-57-B0-C8
> 40-55-9E-B6-18-C3-5C-00-50-01-34-EE-ED-E2-FE-4F
> 80-50-18-10-10-93-0C-00-00-47-45-54-20-2F-77-77
> 77-2F-64-65-6C-69-76-65-72-79-2F-6C-67-2E-70-68
> 70-3F-62-61-6E-6E-65-72-69-64-3D-33-31-38-26-63
> 61-6D-70-61-69-67-6E-69-64-3D-32-38-31-26-7A-6F
> 6E-65-69-64-3D-36-35-26-6C-6F-63-3D-68-74-74-70
> 25-33-41-00-00-00-03-00-00-00-01-00-00-00-64-00
> 00-00-00-00-00-03-EA-00-00-00-00-00-00-00-02-00
> 00-00-01-55-9E-B6-18-00-00-00-0A-00-00-00-19-00
> 00-00-03-00-00-86-80-00-00-0C-F8-00-00-60-67-00
> 00-00-00-00-00-00-01-02-CB-BB-84-00-00-00-02-00
> 00-02-00-A5-6D-B6-00-00-00-00-00-00-00-00-02-00
> 00-00-03-00-00-00-01-00-00-00-01-00-00-00-3E-00
> 00-00-3E-00-14-22-15-DB-0C-00-12-1E-00-2F-F0-08
> 00-45-00-00-30-33-7A-40-00-6F-06-4D-19-4C-EF-34
> 39-55-9E-B4-6E-07-99-00-50-4E-06-43-DA-00-00-00
> 00-70-02-FF-FF-5E-55-00-00-02-04-05-80-01-01-04
> 02-20-FF-00-00-00-03-00-00-00-01-00-00-00-64-00
> 00-00-00-00-00-01-2C-00-00-00-00-00-00-00-02-00
> 00-00-01-55-9E-B3-16-00-00-00-0B-00-00-00-1A-00
> 00-00-03-00-00-86-80-00-00-1B-DC-00-00-60-67-00
> 00-00-00-00-00-00-01-02-CB-BB-85-00-00-00-02-00
> 00-02-00-A5-6D-B8-00-00-00-00-00-00-00-00-02-00
> 00-00-04-00-00-00-01-00-00-00-01-00-00-01-D9-00
> 00-00-80-00-30-48-D5-17-DA-00-12-1E-00-2F-F0-08
> 00-45-00-01-CB-20-84-40-00-7A-06-D0-6D-50-78-B3
> 0A-55-9E-B5-1A-BD-02-00-50-79-3E-E5-68-A9-92-9F
> AF-50-18-FF-FF-25-52-00-00-47-45-54-20-2F-67-61
> 72-62-61-67-65-2F-35-39-2F-35-39-39-35-30-30-2F
> 74-72-65-65-2F-34-38-33-33-33-39-30-5F-31-35-35
> 32-33-34-32-37-35-30-2E-70-6E-67-20-48-54-54-50
> 2F-31-2E-31-0D-0A-56-69-61-3A-20-31-2E-31-20-53
> 43-43-57-00-00-00-03-00-00-00-01-00-00-00-64-00
> 00-00-00-00-00-03-E8-00-00-00-00-00-00-00-02-00
> 00-00-01-55-9E-B5-1A-00-00-00-0E-00-00-00-18-00
> 00-00-03-00-00-86-80-00-00-20-FF-00-00-60-67-00
> 00-00-00
>
> 225.179.158.85 is an mcast address what is this about? Also it does not
> matter if i change the port. This message is always the same.
>
> Stefan
> _______________________________________________
> Ntop mailing list
> Ntop [at] listgateway
> http://listgateway.unipi.it/mailman/listinfo/ntop
>
>
> This email and any files transmitted with it are confidential and are intended solely for the use of the individual or entity to whom they are addressed. If you are not the original recipient or the person responsible for delivering the email to the intended recipient, be advised that you have received this email in error, and that any use, dissemination, forwarding, printing, or copying of this email is strictly prohibited. If you received this email in error, please immediately notify the sender and delete the original.
>
> _______________________________________________
> Ntop mailing list
> Ntop [at] listgateway
> http://listgateway.unipi.it/mailman/listinfo/ntop
>

_______________________________________________
Ntop mailing list
Ntop [at] listgateway
http://listgateway.unipi.it/mailman/listinfo/ntop


s.priebe at allied-internet

Oct 16, 2009, 12:42 AM

Post #5 of 9 (828 views)
Permalink
Re: Problem with sflow plugin [In reply to]

Hi Luca,

thanks for your reply. I'll send you an private e-mail with a packetdump
in a few minutes.

Regards
Stefan

Luca Deri schrieb:
> Haoying/Stefan
> please send me a pcap file (full packets please) containing sflow
> packets I can use to reproduce the bug
>
> Thanks Luca
>
> Haoying Liu wrote:
>> Hi Stefan,
>> I'm also having problem with sflow plugin. When I run it in daemon mode (/usr/local/bin/ntop -d -L -u ntop -P /usr/local/var/ntop --skip-version-check --use-syslog=daemon), I got tons of error of:
>> flow_sample_element length error (expected 0, found 4)
>> sometimes
>> counter_sample_element length error (expected 0, found 4)
>>
>> If I don't run it in daemon mode, I got:
>> flow_sample_element length error (expected 0, found 4)
>> SFABORT: 3
>> SFABORT: 1
>>
>> What sflow source are you using? I am using Juniper EX switches.
>>
>> Thanks,
>> Haoying
>>
>> -----Original Message-----
>> From: ntop-bounces [at] listgateway [mailto:ntop-bounces [at] listgateway] On Behalf Of Stefan Priebe - allied internet ag
>> Sent: Thursday, October 15, 2009 5:57 AM
>> To: ntop [at] listgateway
>> Subject: [Ntop] Problem with sflow plugin
>>
>> Hi!
>>
>> I've installed ntop from SVN and configured the sflow plugin. Now i get
>> thousand of messages like this:
>> SFABORT: 2
>> SFABORT: 1
>> unrecognized extended data tag (source IP = 225.179.158.85)
>> 00-00-00-02-00-00-00-01-55-9E-B3-01-00-73-E5-FE-9C
>> FB-BF-AC-00-00-00-06-00-00-00-01-02-CB-BB-80-00
>> 00-00-02-00-00-02-00-A5-6D-AE-00-00-00-00-00-00
>> 00-00-02-00-00-00-03-00-00-00-01-00-00-00-01-00
>> 00-00-38-00-00-00-38-00-14-22-15-DB-0C-00-12-1E
>> 00-2F-F0-08-00-45-00-00-28-7D-8C-40-00-79-06-D0
>> 51-C1-64-E5-01-55-9E-B7-ED-04-98-00-50-FB-20-F2
>> B5-B7-AB-6D-1E-50-10-FF-FF-E4-59-00-00-E4-00-00
>> 00-00-03-00-00-00-01-00-00-00-64-00-00-00-00-00
>> 00-01-2C-00-00-00-00-00-00-00-02-00-00-00-01-55
>> 9E-B3-16-00-00-00-16-00-00-00-18-00-00-00-03-00
>> 00-86-80-00-00-0C-89-00-00-60-67-00-00-00-00-00
>> 00-00-01-02-CB-BB-81-00-00-00-02-00-00-02-00-A5
>> 6D-B0-00-00-00-00-00-00-00-00-02-00-00-00-04-00
>> 00-00-01-00-00-00-01-00-00-00-42-00-00-00-42-00
>> E0-81-46-49-84-00-12-1E-00-2F-F0-08-00-45-00-00
>> 34-EC-4E-40-00-37-06-3E-8B-54-72-B9-CA-55-9E-B5
>> 0F-F3-81-00-6E-B4-DB-5C-08-E7-3F-1C-5B-80-10-FF
>> FF-7C-0D-00-00-01-01-08-0A-08-25-46-98-2A-F2-5F
>> A7-00-01-00-00-00-03-00-00-00-01-00-00-00-64-00
>> 00-00-00-00-00-03-E8-00-00-00-00-00-00-00-02-00
>> 00-00-01-55-9E-B5-0F-00-00-00-0E-00-00-00-18-00
>> 00-00-03-00-00-86-80-00-00-1A-AE-00-00-60-67-00
>> 00-00-00-00-00-00-01-02-CB-BB-82-00-00-00-02-00
>> 00-02-00-A5-6D-B2-00-00-00-00-00-00-00-00-02-00
>> 00-00-04-00-00-00-01-00-00-00-01-00-00-05-EA-00
>> 00-00-80-00-E0-81-33-A6-76-00-12-1E-00-2F-F0-08
>> 00-45-00-05-DC-91-73-00-00-38-06-A6-AB-5B-70-DE
>> DA-55-9E-B5-14-71-01-00-19-91-95-B1-4A-D8-E6-B8
>> 5D-80-10-44-70-00-3D-00-00-01-01-08-0A-00-07-B8
>> 99-2A-B7-8C-3D-69-39-78-45-39-75-39-76-4E-62-6B
>> 42-31-59-35-35-4F-65-6E-35-56-70-55-41-59-50-39
>> 6A-36-73-65-75-75-53-66-39-2B-76-2F-41-4B-39-4B
>> 64-44-76-5A-45-5A-4A-64-5A-6E-64-48-55-71-77-32
>> 0D-0A-44-00-00-00-03-00-00-00-01-00-00-00-64-00
>> 00-00-00-00-00-03-E8-00-00-00-00-00-00-00-02-00
>> 00-00-01-55-9E-B5-14-00-00-00-0E-00-00-00-18-00
>> 00-00-03-00-00-86-80-00-00-20-FF-00-00-60-67-00
>> 00-00-00-00-00-00-01-02-CB-BB-83-00-00-00-02-00
>> 00-02-00-A5-6D-B4-00-00-00-00-00-00-00-00-02-00
>> 00-00-04-00-00-00-01-00-00-00-01-00-00-05-47-00
>> 00-00-80-00-00-5E-00-01-C9-00-12-1E-00-2F-F0-08
>> 00-45-00-05-39-09-57-40-00-75-06-CB-C0-57-B0-C8
>> 40-55-9E-B6-18-C3-5C-00-50-01-34-EE-ED-E2-FE-4F
>> 80-50-18-10-10-93-0C-00-00-47-45-54-20-2F-77-77
>> 77-2F-64-65-6C-69-76-65-72-79-2F-6C-67-2E-70-68
>> 70-3F-62-61-6E-6E-65-72-69-64-3D-33-31-38-26-63
>> 61-6D-70-61-69-67-6E-69-64-3D-32-38-31-26-7A-6F
>> 6E-65-69-64-3D-36-35-26-6C-6F-63-3D-68-74-74-70
>> 25-33-41-00-00-00-03-00-00-00-01-00-00-00-64-00
>> 00-00-00-00-00-03-EA-00-00-00-00-00-00-00-02-00
>> 00-00-01-55-9E-B6-18-00-00-00-0A-00-00-00-19-00
>> 00-00-03-00-00-86-80-00-00-0C-F8-00-00-60-67-00
>> 00-00-00-00-00-00-01-02-CB-BB-84-00-00-00-02-00
>> 00-02-00-A5-6D-B6-00-00-00-00-00-00-00-00-02-00
>> 00-00-03-00-00-00-01-00-00-00-01-00-00-00-3E-00
>> 00-00-3E-00-14-22-15-DB-0C-00-12-1E-00-2F-F0-08
>> 00-45-00-00-30-33-7A-40-00-6F-06-4D-19-4C-EF-34
>> 39-55-9E-B4-6E-07-99-00-50-4E-06-43-DA-00-00-00
>> 00-70-02-FF-FF-5E-55-00-00-02-04-05-80-01-01-04
>> 02-20-FF-00-00-00-03-00-00-00-01-00-00-00-64-00
>> 00-00-00-00-00-01-2C-00-00-00-00-00-00-00-02-00
>> 00-00-01-55-9E-B3-16-00-00-00-0B-00-00-00-1A-00
>> 00-00-03-00-00-86-80-00-00-1B-DC-00-00-60-67-00
>> 00-00-00-00-00-00-01-02-CB-BB-85-00-00-00-02-00
>> 00-02-00-A5-6D-B8-00-00-00-00-00-00-00-00-02-00
>> 00-00-04-00-00-00-01-00-00-00-01-00-00-01-D9-00
>> 00-00-80-00-30-48-D5-17-DA-00-12-1E-00-2F-F0-08
>> 00-45-00-01-CB-20-84-40-00-7A-06-D0-6D-50-78-B3
>> 0A-55-9E-B5-1A-BD-02-00-50-79-3E-E5-68-A9-92-9F
>> AF-50-18-FF-FF-25-52-00-00-47-45-54-20-2F-67-61
>> 72-62-61-67-65-2F-35-39-2F-35-39-39-35-30-30-2F
>> 74-72-65-65-2F-34-38-33-33-33-39-30-5F-31-35-35
>> 32-33-34-32-37-35-30-2E-70-6E-67-20-48-54-54-50
>> 2F-31-2E-31-0D-0A-56-69-61-3A-20-31-2E-31-20-53
>> 43-43-57-00-00-00-03-00-00-00-01-00-00-00-64-00
>> 00-00-00-00-00-03-E8-00-00-00-00-00-00-00-02-00
>> 00-00-01-55-9E-B5-1A-00-00-00-0E-00-00-00-18-00
>> 00-00-03-00-00-86-80-00-00-20-FF-00-00-60-67-00
>> 00-00-00
>>
>> 225.179.158.85 is an mcast address what is this about? Also it does not
>> matter if i change the port. This message is always the same.
>>
>> Stefan
>> _______________________________________________
>> Ntop mailing list
>> Ntop [at] listgateway
>> http://listgateway.unipi.it/mailman/listinfo/ntop
>>
>>
>> This email and any files transmitted with it are confidential and are intended solely for the use of the individual or entity to whom they are addressed. If you are not the original recipient or the person responsible for delivering the email to the intended recipient, be advised that you have received this email in error, and that any use, dissemination, forwarding, printing, or copying of this email is strictly prohibited. If you received this email in error, please immediately notify the sender and delete the original.
>>
>> _______________________________________________
>> Ntop mailing list
>> Ntop [at] listgateway
>> http://listgateway.unipi.it/mailman/listinfo/ntop
>>
>
> _______________________________________________
> Ntop mailing list
> Ntop [at] listgateway
> http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
Ntop [at] listgateway
http://listgateway.unipi.it/mailman/listinfo/ntop


s.priebe at allied-internet

Oct 19, 2009, 2:13 AM

Post #6 of 9 (811 views)
Permalink
Re: Problem with sflow plugin [In reply to]

Hi Luca,

have you had a look on my and Haoying's samples?

Regards
Stefan

Luca Deri schrieb:
> Haoying/Stefan
> please send me a pcap file (full packets please) containing sflow
> packets I can use to reproduce the bug
>
> Thanks Luca
>
> Haoying Liu wrote:
>> Hi Stefan,
>> I'm also having problem with sflow plugin. When I run it in daemon mode (/usr/local/bin/ntop -d -L -u ntop -P /usr/local/var/ntop --skip-version-check --use-syslog=daemon), I got tons of error of:
>> flow_sample_element length error (expected 0, found 4)
>> sometimes
>> counter_sample_element length error (expected 0, found 4)
>>
>> If I don't run it in daemon mode, I got:
>> flow_sample_element length error (expected 0, found 4)
>> SFABORT: 3
>> SFABORT: 1
>>
>> What sflow source are you using? I am using Juniper EX switches.
>>
>> Thanks,
>> Haoying
>>
>> -----Original Message-----
>> From: ntop-bounces [at] listgateway [mailto:ntop-bounces [at] listgateway] On Behalf Of Stefan Priebe - allied internet ag
>> Sent: Thursday, October 15, 2009 5:57 AM
>> To: ntop [at] listgateway
>> Subject: [Ntop] Problem with sflow plugin
>>
>> Hi!
>>
>> I've installed ntop from SVN and configured the sflow plugin. Now i get
>> thousand of messages like this:
>> SFABORT: 2
>> SFABORT: 1
>> unrecognized extended data tag (source IP = 225.179.158.85)
>> 00-00-00-02-00-00-00-01-55-9E-B3-01-00-73-E5-FE-9C
>> FB-BF-AC-00-00-00-06-00-00-00-01-02-CB-BB-80-00
>> 00-00-02-00-00-02-00-A5-6D-AE-00-00-00-00-00-00
>> 00-00-02-00-00-00-03-00-00-00-01-00-00-00-01-00
>> 00-00-38-00-00-00-38-00-14-22-15-DB-0C-00-12-1E
>> 00-2F-F0-08-00-45-00-00-28-7D-8C-40-00-79-06-D0
>> 51-C1-64-E5-01-55-9E-B7-ED-04-98-00-50-FB-20-F2
>> B5-B7-AB-6D-1E-50-10-FF-FF-E4-59-00-00-E4-00-00
>> 00-00-03-00-00-00-01-00-00-00-64-00-00-00-00-00
>> 00-01-2C-00-00-00-00-00-00-00-02-00-00-00-01-55
>> 9E-B3-16-00-00-00-16-00-00-00-18-00-00-00-03-00
>> 00-86-80-00-00-0C-89-00-00-60-67-00-00-00-00-00
>> 00-00-01-02-CB-BB-81-00-00-00-02-00-00-02-00-A5
>> 6D-B0-00-00-00-00-00-00-00-00-02-00-00-00-04-00
>> 00-00-01-00-00-00-01-00-00-00-42-00-00-00-42-00
>> E0-81-46-49-84-00-12-1E-00-2F-F0-08-00-45-00-00
>> 34-EC-4E-40-00-37-06-3E-8B-54-72-B9-CA-55-9E-B5
>> 0F-F3-81-00-6E-B4-DB-5C-08-E7-3F-1C-5B-80-10-FF
>> FF-7C-0D-00-00-01-01-08-0A-08-25-46-98-2A-F2-5F
>> A7-00-01-00-00-00-03-00-00-00-01-00-00-00-64-00
>> 00-00-00-00-00-03-E8-00-00-00-00-00-00-00-02-00
>> 00-00-01-55-9E-B5-0F-00-00-00-0E-00-00-00-18-00
>> 00-00-03-00-00-86-80-00-00-1A-AE-00-00-60-67-00
>> 00-00-00-00-00-00-01-02-CB-BB-82-00-00-00-02-00
>> 00-02-00-A5-6D-B2-00-00-00-00-00-00-00-00-02-00
>> 00-00-04-00-00-00-01-00-00-00-01-00-00-05-EA-00
>> 00-00-80-00-E0-81-33-A6-76-00-12-1E-00-2F-F0-08
>> 00-45-00-05-DC-91-73-00-00-38-06-A6-AB-5B-70-DE
>> DA-55-9E-B5-14-71-01-00-19-91-95-B1-4A-D8-E6-B8
>> 5D-80-10-44-70-00-3D-00-00-01-01-08-0A-00-07-B8
>> 99-2A-B7-8C-3D-69-39-78-45-39-75-39-76-4E-62-6B
>> 42-31-59-35-35-4F-65-6E-35-56-70-55-41-59-50-39
>> 6A-36-73-65-75-75-53-66-39-2B-76-2F-41-4B-39-4B
>> 64-44-76-5A-45-5A-4A-64-5A-6E-64-48-55-71-77-32
>> 0D-0A-44-00-00-00-03-00-00-00-01-00-00-00-64-00
>> 00-00-00-00-00-03-E8-00-00-00-00-00-00-00-02-00
>> 00-00-01-55-9E-B5-14-00-00-00-0E-00-00-00-18-00
>> 00-00-03-00-00-86-80-00-00-20-FF-00-00-60-67-00
>> 00-00-00-00-00-00-01-02-CB-BB-83-00-00-00-02-00
>> 00-02-00-A5-6D-B4-00-00-00-00-00-00-00-00-02-00
>> 00-00-04-00-00-00-01-00-00-00-01-00-00-05-47-00
>> 00-00-80-00-00-5E-00-01-C9-00-12-1E-00-2F-F0-08
>> 00-45-00-05-39-09-57-40-00-75-06-CB-C0-57-B0-C8
>> 40-55-9E-B6-18-C3-5C-00-50-01-34-EE-ED-E2-FE-4F
>> 80-50-18-10-10-93-0C-00-00-47-45-54-20-2F-77-77
>> 77-2F-64-65-6C-69-76-65-72-79-2F-6C-67-2E-70-68
>> 70-3F-62-61-6E-6E-65-72-69-64-3D-33-31-38-26-63
>> 61-6D-70-61-69-67-6E-69-64-3D-32-38-31-26-7A-6F
>> 6E-65-69-64-3D-36-35-26-6C-6F-63-3D-68-74-74-70
>> 25-33-41-00-00-00-03-00-00-00-01-00-00-00-64-00
>> 00-00-00-00-00-03-EA-00-00-00-00-00-00-00-02-00
>> 00-00-01-55-9E-B6-18-00-00-00-0A-00-00-00-19-00
>> 00-00-03-00-00-86-80-00-00-0C-F8-00-00-60-67-00
>> 00-00-00-00-00-00-01-02-CB-BB-84-00-00-00-02-00
>> 00-02-00-A5-6D-B6-00-00-00-00-00-00-00-00-02-00
>> 00-00-03-00-00-00-01-00-00-00-01-00-00-00-3E-00
>> 00-00-3E-00-14-22-15-DB-0C-00-12-1E-00-2F-F0-08
>> 00-45-00-00-30-33-7A-40-00-6F-06-4D-19-4C-EF-34
>> 39-55-9E-B4-6E-07-99-00-50-4E-06-43-DA-00-00-00
>> 00-70-02-FF-FF-5E-55-00-00-02-04-05-80-01-01-04
>> 02-20-FF-00-00-00-03-00-00-00-01-00-00-00-64-00
>> 00-00-00-00-00-01-2C-00-00-00-00-00-00-00-02-00
>> 00-00-01-55-9E-B3-16-00-00-00-0B-00-00-00-1A-00
>> 00-00-03-00-00-86-80-00-00-1B-DC-00-00-60-67-00
>> 00-00-00-00-00-00-01-02-CB-BB-85-00-00-00-02-00
>> 00-02-00-A5-6D-B8-00-00-00-00-00-00-00-00-02-00
>> 00-00-04-00-00-00-01-00-00-00-01-00-00-01-D9-00
>> 00-00-80-00-30-48-D5-17-DA-00-12-1E-00-2F-F0-08
>> 00-45-00-01-CB-20-84-40-00-7A-06-D0-6D-50-78-B3
>> 0A-55-9E-B5-1A-BD-02-00-50-79-3E-E5-68-A9-92-9F
>> AF-50-18-FF-FF-25-52-00-00-47-45-54-20-2F-67-61
>> 72-62-61-67-65-2F-35-39-2F-35-39-39-35-30-30-2F
>> 74-72-65-65-2F-34-38-33-33-33-39-30-5F-31-35-35
>> 32-33-34-32-37-35-30-2E-70-6E-67-20-48-54-54-50
>> 2F-31-2E-31-0D-0A-56-69-61-3A-20-31-2E-31-20-53
>> 43-43-57-00-00-00-03-00-00-00-01-00-00-00-64-00
>> 00-00-00-00-00-03-E8-00-00-00-00-00-00-00-02-00
>> 00-00-01-55-9E-B5-1A-00-00-00-0E-00-00-00-18-00
>> 00-00-03-00-00-86-80-00-00-20-FF-00-00-60-67-00
>> 00-00-00
>>
>> 225.179.158.85 is an mcast address what is this about? Also it does not
>> matter if i change the port. This message is always the same.
>>
>> Stefan
>> _______________________________________________
>> Ntop mailing list
>> Ntop [at] listgateway
>> http://listgateway.unipi.it/mailman/listinfo/ntop
>>
>>
>> This email and any files transmitted with it are confidential and are intended solely for the use of the individual or entity to whom they are addressed. If you are not the original recipient or the person responsible for delivering the email to the intended recipient, be advised that you have received this email in error, and that any use, dissemination, forwarding, printing, or copying of this email is strictly prohibited. If you received this email in error, please immediately notify the sender and delete the original.
>>
>> _______________________________________________
>> Ntop mailing list
>> Ntop [at] listgateway
>> http://listgateway.unipi.it/mailman/listinfo/ntop
>>
>
> _______________________________________________
> Ntop mailing list
> Ntop [at] listgateway
> http://listgateway.unipi.it/mailman/listinfo/ntop

_______________________________________________
Ntop mailing list
Ntop [at] listgateway
http://listgateway.unipi.it/mailman/listinfo/ntop


deri at ntop

Oct 19, 2009, 2:28 AM

Post #7 of 9 (810 views)
Permalink
Re: Problem with sflow plugin [In reply to]

Stefan
yours works now, haoying not because he has captured the files with -i
any so they don't have a valid eth header

Luca


Stefan Priebe - allied internet ag wrote:
> Hi Luca,
>
> have you had a look on my and Haoying's samples?
>
> Regards
> Stefan
>
> Luca Deri schrieb:
>
>> Haoying/Stefan
>> please send me a pcap file (full packets please) containing sflow
>> packets I can use to reproduce the bug
>>
>> Thanks Luca
>>
>> Haoying Liu wrote:
>>
>>> Hi Stefan,
>>> I'm also having problem with sflow plugin. When I run it in daemon mode (/usr/local/bin/ntop -d -L -u ntop -P /usr/local/var/ntop --skip-version-check --use-syslog=daemon), I got tons of error of:
>>> flow_sample_element length error (expected 0, found 4)
>>> sometimes
>>> counter_sample_element length error (expected 0, found 4)
>>>
>>> If I don't run it in daemon mode, I got:
>>> flow_sample_element length error (expected 0, found 4)
>>> SFABORT: 3
>>> SFABORT: 1
>>>
>>> What sflow source are you using? I am using Juniper EX switches.
>>>
>>> Thanks,
>>> Haoying
>>>
>>> -----Original Message-----
>>> From: ntop-bounces [at] listgateway [mailto:ntop-bounces [at] listgateway] On Behalf Of Stefan Priebe - allied internet ag
>>> Sent: Thursday, October 15, 2009 5:57 AM
>>> To: ntop [at] listgateway
>>> Subject: [Ntop] Problem with sflow plugin
>>>
>>> Hi!
>>>
>>> I've installed ntop from SVN and configured the sflow plugin. Now i get
>>> thousand of messages like this:
>>> SFABORT: 2
>>> SFABORT: 1
>>> unrecognized extended data tag (source IP = 225.179.158.85)
>>> 00-00-00-02-00-00-00-01-55-9E-B3-01-00-73-E5-FE-9C
>>> FB-BF-AC-00-00-00-06-00-00-00-01-02-CB-BB-80-00
>>> 00-00-02-00-00-02-00-A5-6D-AE-00-00-00-00-00-00
>>> 00-00-02-00-00-00-03-00-00-00-01-00-00-00-01-00
>>> 00-00-38-00-00-00-38-00-14-22-15-DB-0C-00-12-1E
>>> 00-2F-F0-08-00-45-00-00-28-7D-8C-40-00-79-06-D0
>>> 51-C1-64-E5-01-55-9E-B7-ED-04-98-00-50-FB-20-F2
>>> B5-B7-AB-6D-1E-50-10-FF-FF-E4-59-00-00-E4-00-00
>>> 00-00-03-00-00-00-01-00-00-00-64-00-00-00-00-00
>>> 00-01-2C-00-00-00-00-00-00-00-02-00-00-00-01-55
>>> 9E-B3-16-00-00-00-16-00-00-00-18-00-00-00-03-00
>>> 00-86-80-00-00-0C-89-00-00-60-67-00-00-00-00-00
>>> 00-00-01-02-CB-BB-81-00-00-00-02-00-00-02-00-A5
>>> 6D-B0-00-00-00-00-00-00-00-00-02-00-00-00-04-00
>>> 00-00-01-00-00-00-01-00-00-00-42-00-00-00-42-00
>>> E0-81-46-49-84-00-12-1E-00-2F-F0-08-00-45-00-00
>>> 34-EC-4E-40-00-37-06-3E-8B-54-72-B9-CA-55-9E-B5
>>> 0F-F3-81-00-6E-B4-DB-5C-08-E7-3F-1C-5B-80-10-FF
>>> FF-7C-0D-00-00-01-01-08-0A-08-25-46-98-2A-F2-5F
>>> A7-00-01-00-00-00-03-00-00-00-01-00-00-00-64-00
>>> 00-00-00-00-00-03-E8-00-00-00-00-00-00-00-02-00
>>> 00-00-01-55-9E-B5-0F-00-00-00-0E-00-00-00-18-00
>>> 00-00-03-00-00-86-80-00-00-1A-AE-00-00-60-67-00
>>> 00-00-00-00-00-00-01-02-CB-BB-82-00-00-00-02-00
>>> 00-02-00-A5-6D-B2-00-00-00-00-00-00-00-00-02-00
>>> 00-00-04-00-00-00-01-00-00-00-01-00-00-05-EA-00
>>> 00-00-80-00-E0-81-33-A6-76-00-12-1E-00-2F-F0-08
>>> 00-45-00-05-DC-91-73-00-00-38-06-A6-AB-5B-70-DE
>>> DA-55-9E-B5-14-71-01-00-19-91-95-B1-4A-D8-E6-B8
>>> 5D-80-10-44-70-00-3D-00-00-01-01-08-0A-00-07-B8
>>> 99-2A-B7-8C-3D-69-39-78-45-39-75-39-76-4E-62-6B
>>> 42-31-59-35-35-4F-65-6E-35-56-70-55-41-59-50-39
>>> 6A-36-73-65-75-75-53-66-39-2B-76-2F-41-4B-39-4B
>>> 64-44-76-5A-45-5A-4A-64-5A-6E-64-48-55-71-77-32
>>> 0D-0A-44-00-00-00-03-00-00-00-01-00-00-00-64-00
>>> 00-00-00-00-00-03-E8-00-00-00-00-00-00-00-02-00
>>> 00-00-01-55-9E-B5-14-00-00-00-0E-00-00-00-18-00
>>> 00-00-03-00-00-86-80-00-00-20-FF-00-00-60-67-00
>>> 00-00-00-00-00-00-01-02-CB-BB-83-00-00-00-02-00
>>> 00-02-00-A5-6D-B4-00-00-00-00-00-00-00-00-02-00
>>> 00-00-04-00-00-00-01-00-00-00-01-00-00-05-47-00
>>> 00-00-80-00-00-5E-00-01-C9-00-12-1E-00-2F-F0-08
>>> 00-45-00-05-39-09-57-40-00-75-06-CB-C0-57-B0-C8
>>> 40-55-9E-B6-18-C3-5C-00-50-01-34-EE-ED-E2-FE-4F
>>> 80-50-18-10-10-93-0C-00-00-47-45-54-20-2F-77-77
>>> 77-2F-64-65-6C-69-76-65-72-79-2F-6C-67-2E-70-68
>>> 70-3F-62-61-6E-6E-65-72-69-64-3D-33-31-38-26-63
>>> 61-6D-70-61-69-67-6E-69-64-3D-32-38-31-26-7A-6F
>>> 6E-65-69-64-3D-36-35-26-6C-6F-63-3D-68-74-74-70
>>> 25-33-41-00-00-00-03-00-00-00-01-00-00-00-64-00
>>> 00-00-00-00-00-03-EA-00-00-00-00-00-00-00-02-00
>>> 00-00-01-55-9E-B6-18-00-00-00-0A-00-00-00-19-00
>>> 00-00-03-00-00-86-80-00-00-0C-F8-00-00-60-67-00
>>> 00-00-00-00-00-00-01-02-CB-BB-84-00-00-00-02-00
>>> 00-02-00-A5-6D-B6-00-00-00-00-00-00-00-00-02-00
>>> 00-00-03-00-00-00-01-00-00-00-01-00-00-00-3E-00
>>> 00-00-3E-00-14-22-15-DB-0C-00-12-1E-00-2F-F0-08
>>> 00-45-00-00-30-33-7A-40-00-6F-06-4D-19-4C-EF-34
>>> 39-55-9E-B4-6E-07-99-00-50-4E-06-43-DA-00-00-00
>>> 00-70-02-FF-FF-5E-55-00-00-02-04-05-80-01-01-04
>>> 02-20-FF-00-00-00-03-00-00-00-01-00-00-00-64-00
>>> 00-00-00-00-00-01-2C-00-00-00-00-00-00-00-02-00
>>> 00-00-01-55-9E-B3-16-00-00-00-0B-00-00-00-1A-00
>>> 00-00-03-00-00-86-80-00-00-1B-DC-00-00-60-67-00
>>> 00-00-00-00-00-00-01-02-CB-BB-85-00-00-00-02-00
>>> 00-02-00-A5-6D-B8-00-00-00-00-00-00-00-00-02-00
>>> 00-00-04-00-00-00-01-00-00-00-01-00-00-01-D9-00
>>> 00-00-80-00-30-48-D5-17-DA-00-12-1E-00-2F-F0-08
>>> 00-45-00-01-CB-20-84-40-00-7A-06-D0-6D-50-78-B3
>>> 0A-55-9E-B5-1A-BD-02-00-50-79-3E-E5-68-A9-92-9F
>>> AF-50-18-FF-FF-25-52-00-00-47-45-54-20-2F-67-61
>>> 72-62-61-67-65-2F-35-39-2F-35-39-39-35-30-30-2F
>>> 74-72-65-65-2F-34-38-33-33-33-39-30-5F-31-35-35
>>> 32-33-34-32-37-35-30-2E-70-6E-67-20-48-54-54-50
>>> 2F-31-2E-31-0D-0A-56-69-61-3A-20-31-2E-31-20-53
>>> 43-43-57-00-00-00-03-00-00-00-01-00-00-00-64-00
>>> 00-00-00-00-00-03-E8-00-00-00-00-00-00-00-02-00
>>> 00-00-01-55-9E-B5-1A-00-00-00-0E-00-00-00-18-00
>>> 00-00-03-00-00-86-80-00-00-20-FF-00-00-60-67-00
>>> 00-00-00
>>>
>>> 225.179.158.85 is an mcast address what is this about? Also it does not
>>> matter if i change the port. This message is always the same.
>>>
>>> Stefan
>>> _______________________________________________
>>> Ntop mailing list
>>> Ntop [at] listgateway
>>> http://listgateway.unipi.it/mailman/listinfo/ntop
>>>
>>>
>>> This email and any files transmitted with it are confidential and are intended solely for the use of the individual or entity to whom they are addressed. If you are not the original recipient or the person responsible for delivering the email to the intended recipient, be advised that you have received this email in error, and that any use, dissemination, forwarding, printing, or copying of this email is strictly prohibited. If you received this email in error, please immediately notify the sender and delete the original.
>>>
>>> _______________________________________________
>>> Ntop mailing list
>>> Ntop [at] listgateway
>>> http://listgateway.unipi.it/mailman/listinfo/ntop
>>>
>>>
>> _______________________________________________
>> Ntop mailing list
>> Ntop [at] listgateway
>> http://listgateway.unipi.it/mailman/listinfo/ntop
>>
>
> _______________________________________________
> Ntop mailing list
> Ntop [at] listgateway
> http://listgateway.unipi.it/mailman/listinfo/ntop
>

_______________________________________________
Ntop mailing list
Ntop [at] listgateway
http://listgateway.unipi.it/mailman/listinfo/ntop


s.priebe at allied-internet

Oct 19, 2009, 2:43 AM

Post #8 of 9 (812 views)
Permalink
Re: Problem with sflow plugin [In reply to]

Hi!

I'm sorry but i'm still getting these errors (At revision 3956):
SFABORT: 2
SFABORT: 1
SFABORT: 1
unrecognized extended data tag (source IP = 225.179.158.85)
00-00-00-02-00-00-00-01-55-9E-B3-01-00-8D-47-55-B1
55-75-9C-00-00-00-06-00-00-00-01-03-68-38-41-00
00-00-02-00-00-02-00-DE-67-30-00-00-00-00-00-00
00-00-02-00-00-00-04-00-00-00-01-00-00-00-01-00
00-00-3C-00-00-00-3C-00-30-48-67-67-08-00-12-1E
00-2F-F0-08-00-45-00-00-28-E7-61-40-00-70-06-2F

Stefan

Luca Deri schrieb:
> Stefan
> yours works now, haoying not because he has captured the files with -i
> any so they don't have a valid eth header
>
> Luca
>
>
> Stefan Priebe - allied internet ag wrote:
>> Hi Luca,
>>
>> have you had a look on my and Haoying's samples?
>>
>> Regards
>> Stefan
>>
>> Luca Deri schrieb:
>>
>>> Haoying/Stefan
>>> please send me a pcap file (full packets please) containing sflow
>>> packets I can use to reproduce the bug
>>>
>>> Thanks Luca
>>>
>>> Haoying Liu wrote:
>>>
>>>> Hi Stefan,
>>>> I'm also having problem with sflow plugin. When I run it in daemon mode (/usr/local/bin/ntop -d -L -u ntop -P /usr/local/var/ntop --skip-version-check --use-syslog=daemon), I got tons of error of:
>>>> flow_sample_element length error (expected 0, found 4)
>>>> sometimes
>>>> counter_sample_element length error (expected 0, found 4)
>>>>
>>>> If I don't run it in daemon mode, I got:
>>>> flow_sample_element length error (expected 0, found 4)
>>>> SFABORT: 3
>>>> SFABORT: 1
>>>>
>>>> What sflow source are you using? I am using Juniper EX switches.
>>>>
>>>> Thanks,
>>>> Haoying
>>>>
>>>> -----Original Message-----
>>>> From: ntop-bounces [at] listgateway [mailto:ntop-bounces [at] listgateway] On Behalf Of Stefan Priebe - allied internet ag
>>>> Sent: Thursday, October 15, 2009 5:57 AM
>>>> To: ntop [at] listgateway
>>>> Subject: [Ntop] Problem with sflow plugin
>>>>
>>>> Hi!
>>>>
>>>> I've installed ntop from SVN and configured the sflow plugin. Now i get
>>>> thousand of messages like this:
>>>> SFABORT: 2
>>>> SFABORT: 1
>>>> unrecognized extended data tag (source IP = 225.179.158.85)
>>>> 00-00-00-02-00-00-00-01-55-9E-B3-01-00-73-E5-FE-9C
>>>> FB-BF-AC-00-00-00-06-00-00-00-01-02-CB-BB-80-00
>>>> 00-00-02-00-00-02-00-A5-6D-AE-00-00-00-00-00-00
>>>> 00-00-02-00-00-00-03-00-00-00-01-00-00-00-01-00
>>>> 00-00-38-00-00-00-38-00-14-22-15-DB-0C-00-12-1E
>>>> 00-2F-F0-08-00-45-00-00-28-7D-8C-40-00-79-06-D0
>>>> 51-C1-64-E5-01-55-9E-B7-ED-04-98-00-50-FB-20-F2
>>>> B5-B7-AB-6D-1E-50-10-FF-FF-E4-59-00-00-E4-00-00
>>>> 00-00-03-00-00-00-01-00-00-00-64-00-00-00-00-00
>>>> 00-01-2C-00-00-00-00-00-00-00-02-00-00-00-01-55
>>>> 9E-B3-16-00-00-00-16-00-00-00-18-00-00-00-03-00
>>>> 00-86-80-00-00-0C-89-00-00-60-67-00-00-00-00-00
>>>> 00-00-01-02-CB-BB-81-00-00-00-02-00-00-02-00-A5
>>>> 6D-B0-00-00-00-00-00-00-00-00-02-00-00-00-04-00
>>>> 00-00-01-00-00-00-01-00-00-00-42-00-00-00-42-00
>>>> E0-81-46-49-84-00-12-1E-00-2F-F0-08-00-45-00-00
>>>> 34-EC-4E-40-00-37-06-3E-8B-54-72-B9-CA-55-9E-B5
>>>> 0F-F3-81-00-6E-B4-DB-5C-08-E7-3F-1C-5B-80-10-FF
>>>> FF-7C-0D-00-00-01-01-08-0A-08-25-46-98-2A-F2-5F
>>>> A7-00-01-00-00-00-03-00-00-00-01-00-00-00-64-00
>>>> 00-00-00-00-00-03-E8-00-00-00-00-00-00-00-02-00
>>>> 00-00-01-55-9E-B5-0F-00-00-00-0E-00-00-00-18-00
>>>> 00-00-03-00-00-86-80-00-00-1A-AE-00-00-60-67-00
>>>> 00-00-00-00-00-00-01-02-CB-BB-82-00-00-00-02-00
>>>> 00-02-00-A5-6D-B2-00-00-00-00-00-00-00-00-02-00
>>>> 00-00-04-00-00-00-01-00-00-00-01-00-00-05-EA-00
>>>> 00-00-80-00-E0-81-33-A6-76-00-12-1E-00-2F-F0-08
>>>> 00-45-00-05-DC-91-73-00-00-38-06-A6-AB-5B-70-DE
>>>> DA-55-9E-B5-14-71-01-00-19-91-95-B1-4A-D8-E6-B8
>>>> 5D-80-10-44-70-00-3D-00-00-01-01-08-0A-00-07-B8
>>>> 99-2A-B7-8C-3D-69-39-78-45-39-75-39-76-4E-62-6B
>>>> 42-31-59-35-35-4F-65-6E-35-56-70-55-41-59-50-39
>>>> 6A-36-73-65-75-75-53-66-39-2B-76-2F-41-4B-39-4B
>>>> 64-44-76-5A-45-5A-4A-64-5A-6E-64-48-55-71-77-32
>>>> 0D-0A-44-00-00-00-03-00-00-00-01-00-00-00-64-00
>>>> 00-00-00-00-00-03-E8-00-00-00-00-00-00-00-02-00
>>>> 00-00-01-55-9E-B5-14-00-00-00-0E-00-00-00-18-00
>>>> 00-00-03-00-00-86-80-00-00-20-FF-00-00-60-67-00
>>>> 00-00-00-00-00-00-01-02-CB-BB-83-00-00-00-02-00
>>>> 00-02-00-A5-6D-B4-00-00-00-00-00-00-00-00-02-00
>>>> 00-00-04-00-00-00-01-00-00-00-01-00-00-05-47-00
>>>> 00-00-80-00-00-5E-00-01-C9-00-12-1E-00-2F-F0-08
>>>> 00-45-00-05-39-09-57-40-00-75-06-CB-C0-57-B0-C8
>>>> 40-55-9E-B6-18-C3-5C-00-50-01-34-EE-ED-E2-FE-4F
>>>> 80-50-18-10-10-93-0C-00-00-47-45-54-20-2F-77-77
>>>> 77-2F-64-65-6C-69-76-65-72-79-2F-6C-67-2E-70-68
>>>> 70-3F-62-61-6E-6E-65-72-69-64-3D-33-31-38-26-63
>>>> 61-6D-70-61-69-67-6E-69-64-3D-32-38-31-26-7A-6F
>>>> 6E-65-69-64-3D-36-35-26-6C-6F-63-3D-68-74-74-70
>>>> 25-33-41-00-00-00-03-00-00-00-01-00-00-00-64-00
>>>> 00-00-00-00-00-03-EA-00-00-00-00-00-00-00-02-00
>>>> 00-00-01-55-9E-B6-18-00-00-00-0A-00-00-00-19-00
>>>> 00-00-03-00-00-86-80-00-00-0C-F8-00-00-60-67-00
>>>> 00-00-00-00-00-00-01-02-CB-BB-84-00-00-00-02-00
>>>> 00-02-00-A5-6D-B6-00-00-00-00-00-00-00-00-02-00
>>>> 00-00-03-00-00-00-01-00-00-00-01-00-00-00-3E-00
>>>> 00-00-3E-00-14-22-15-DB-0C-00-12-1E-00-2F-F0-08
>>>> 00-45-00-00-30-33-7A-40-00-6F-06-4D-19-4C-EF-34
>>>> 39-55-9E-B4-6E-07-99-00-50-4E-06-43-DA-00-00-00
>>>> 00-70-02-FF-FF-5E-55-00-00-02-04-05-80-01-01-04
>>>> 02-20-FF-00-00-00-03-00-00-00-01-00-00-00-64-00
>>>> 00-00-00-00-00-01-2C-00-00-00-00-00-00-00-02-00
>>>> 00-00-01-55-9E-B3-16-00-00-00-0B-00-00-00-1A-00
>>>> 00-00-03-00-00-86-80-00-00-1B-DC-00-00-60-67-00
>>>> 00-00-00-00-00-00-01-02-CB-BB-85-00-00-00-02-00
>>>> 00-02-00-A5-6D-B8-00-00-00-00-00-00-00-00-02-00
>>>> 00-00-04-00-00-00-01-00-00-00-01-00-00-01-D9-00
>>>> 00-00-80-00-30-48-D5-17-DA-00-12-1E-00-2F-F0-08
>>>> 00-45-00-01-CB-20-84-40-00-7A-06-D0-6D-50-78-B3
>>>> 0A-55-9E-B5-1A-BD-02-00-50-79-3E-E5-68-A9-92-9F
>>>> AF-50-18-FF-FF-25-52-00-00-47-45-54-20-2F-67-61
>>>> 72-62-61-67-65-2F-35-39-2F-35-39-39-35-30-30-2F
>>>> 74-72-65-65-2F-34-38-33-33-33-39-30-5F-31-35-35
>>>> 32-33-34-32-37-35-30-2E-70-6E-67-20-48-54-54-50
>>>> 2F-31-2E-31-0D-0A-56-69-61-3A-20-31-2E-31-20-53
>>>> 43-43-57-00-00-00-03-00-00-00-01-00-00-00-64-00
>>>> 00-00-00-00-00-03-E8-00-00-00-00-00-00-00-02-00
>>>> 00-00-01-55-9E-B5-1A-00-00-00-0E-00-00-00-18-00
>>>> 00-00-03-00-00-86-80-00-00-20-FF-00-00-60-67-00
>>>> 00-00-00
>>>>
>>>> 225.179.158.85 is an mcast address what is this about? Also it does not
>>>> matter if i change the port. This message is always the same.
>>>>
>>>> Stefan
>>>> _______________________________________________
>>>> Ntop mailing list
>>>> Ntop [at] listgateway
>>>> http://listgateway.unipi.it/mailman/listinfo/ntop
>>>>
>>>>
>>>> This email and any files transmitted with it are confidential and are intended solely for the use of the individual or entity to whom they are addressed. If you are not the original recipient or the person responsible for delivering the email to the intended recipient, be advised that you have received this email in error, and that any use, dissemination, forwarding, printing, or copying of this email is strictly prohibited. If you received this email in error, please immediately notify the sender and delete the original.
>>>>
>>>> _______________________________________________
>>>> Ntop mailing list
>>>> Ntop [at] listgateway
>>>> http://listgateway.unipi.it/mailman/listinfo/ntop
>>>>
>>>>
>>> _______________________________________________
>>> Ntop mailing list
>>> Ntop [at] listgateway
>>> http://listgateway.unipi.it/mailman/listinfo/ntop
>>>
>> _______________________________________________
>> Ntop mailing list
>> Ntop [at] listgateway
>> http://listgateway.unipi.it/mailman/listinfo/ntop
>>
>
> _______________________________________________
> Ntop mailing list
> Ntop [at] listgateway
> http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
Ntop [at] listgateway
http://listgateway.unipi.it/mailman/listinfo/ntop


deri at ntop

Oct 19, 2009, 2:48 AM

Post #9 of 9 (810 views)
Permalink
Re: Problem with sflow plugin [In reply to]

Stefan
send me another pcap file I can reproduce the problem

Luca

Stefan Priebe - allied internet ag wrote:
> Hi!
>
> I'm sorry but i'm still getting these errors (At revision 3956):
> SFABORT: 2
> SFABORT: 1
> SFABORT: 1
> unrecognized extended data tag (source IP = 225.179.158.85)
> 00-00-00-02-00-00-00-01-55-9E-B3-01-00-8D-47-55-B1
> 55-75-9C-00-00-00-06-00-00-00-01-03-68-38-41-00
> 00-00-02-00-00-02-00-DE-67-30-00-00-00-00-00-00
> 00-00-02-00-00-00-04-00-00-00-01-00-00-00-01-00
> 00-00-3C-00-00-00-3C-00-30-48-67-67-08-00-12-1E
> 00-2F-F0-08-00-45-00-00-28-E7-61-40-00-70-06-2F
>
> Stefan

_______________________________________________
Ntop mailing list
Ntop [at] listgateway
http://listgateway.unipi.it/mailman/listinfo/ntop

NTop users RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.