Hey all, I emailed the list a few weeks back with an error where v5 flows exported from a Cisco 7301 were occasionally being entered into the database in the past. Offlist Paolo and I ran through the issue with a few PCAPs and debug output from the collector.
Paolo found the issue to be caused by the release of IOS we were using, 12.2(28)SB6. The 7301 was occasionally exporting flows with the timestamp in the flow set before the router uptime, which causes a buffer underflow (as far as I understand) when the flows are processed by the collector, causing entries for around 49 days in the past to be entered into the database. If anyone else has a similar issue to this, the only real solution would be to upgrade the version of IOS you are using to at least 12.2(31)SB15, in which we the issues had been resolved (even though there is no bug listed in any release notes for this version of IOS, or previous.) Cheers again for the help Paolo :) -- Peter
_______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
