I want undrestand which netflow packages make core dump

MyWebSite http://mfaridi.com

On Sat, 31 Oct 2020, 15:28 Mostaf Faridi, <mostafafar...@gmail.com> wrote:

> Thank you for the clarification.
> How I undrestand which netflow make this error?
>
> Best Regards
> Faridi
>
> MyWebSite http://mfaridi.com
>
> On Sat, 31 Oct 2020, 15:24 Brian Candler, <b.cand...@pobox.com> wrote:
>
>> On 31/10/2020 08:43, Mostaf Faridi wrote:
>> > I run on server this
>> >
>> > Tcpdump -i bge0 -w file.pcap
>> >
>> >  For 3 min
>> > When I run
>> > Nfdump -r file.pcap
>> >
>> > I see this error
>> >
>> > Openfile 'file.pcap' : bad magic: 0xC3D4
>>
>> Sorry my mistake: pcap files are read by nfcapd, not nfdump. So you'd
>> need to do:
>>
>>      nfcapd -f file.pcap  ....
>>
>> nfdump reads nfdump-format data files, which are *written* by nfcapd.
>>
>> Now, you're saying it's not nfcapd that crashes, but nfdump. This could
>> mean one of two things:
>>
>> 1. The problematic netflow data is causing nfcapd to write out an
>> invalid nfdump-format file (which in turn causes nfdump to crash); or
>>
>> 2. nfcapd is writing out a valid nfdump-format file, but nfdump crashes
>> on that specific flow
>>
>> I'm afraid you'll need to do some C debugging to find out which of these
>> cases it is.
>>
>> Regards,
>>
>> Brian.
>>
>>
_______________________________________________
Nfdump-discuss mailing list
Nfdump-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfdump-discuss

Reply via email to