Hello!
I've got problem with flow-tools-0.68 when try to parse some raw files (
you can get it here: http://kjam.spb.ru/flows/ft-v05.gz )
# flow-cat ft-v05.gz | flow-stat -f9 -S3| less :
flow-cat: inflate(): failed
# --- ---- ---- Report Information --- --- ---
#
# Fields: Total
# Symbols: Disabled
# Sorting: Descending Field 3
# Name: Source/Destination IP
#
# Args: flow-stat -f10 -S3
#
#
# src IPaddr dst IPaddr flows octets packets
#
213.170.117.24 0.28.121.122 109 430624994468
436
213.170.117.206 0.28.110.122 121 366518588436
484
67.18.247.34 0.28.110.206 115 357543745244
460
...
flow-capture run with restrictions for netflow senders:
/usr/local/bin/flow-capture -z6 -w/netflow x.y.117.254/x.y.117.253/9990
This error was found twice a year, and in two files in one day (2008-02-12):
ft-v05.2008-02-12.070000+0300.gz
ft-v05.2008-02-12.161500+0300.gz
Whats wrong with raw-files / flow-cat ?
Thank you!
--
===============================
= Dmitry S. Vlasov
= Quantum Communications NOC
= Saint-Petersburg Russia
= +7 (812) 336-4000 (ext. 240)
===============================