Cisco Netflow

[CS Lee]

Carter,

I have 10G argus file and want to split it to 1G each, when i try

# rasplit -M size 1000m -r argus.out -w "archive/argus."
rasplit[23043]: 09:24:08.285918 RaProcessRecord: stime is zero

The split process terminated half way, and comes out with the error. I'm on
.34

By the way I would like to know whether netflow is already supported since
there's not much that can tell in the changelog.

Thanks.

On 10/20/06, Carter Bullard <carter at qosient.com> wrote:
>
> Hey CS,
> Hmmmmmm, I must have ripped out all the netflow support for some reason,
> I'll put it back in right now.
> Carter
>
>
> On Oct 19, 2006, at 6:19 AM, carter at qosient.com wrote:
>
> > All ra* programs should be able to read all versions of netflow
> > except v9, and this includes radium.  I haven't seen the error
> > you're seeing, but I'll take a look at the code this afternoon/
> > evening when I get back.
> >
> > If you would like to debug, try running ra with -D 12, to see what
> > it thinks is happening.
> >
> > Carter
> >
> >
> >
> > Carter Bullard
> > QoSient LLC
> > 150 E. 57th Street Suite 12D
> > New York, New York 10022
> > +1 212 588-9133 Phone
> > +1 212 588-9134 Fax
> >
> > -----Original Message-----
> > From: "CS Lee" <geek00l at gmail.com>
> > Date: Wed, 18 Oct 2006 21:00:25
> > To:argus-info at lists.andrew.cmu.edu
> > Subject: [ARGUS] Cisco Netflow
> >
> > Hey all,
> >
> > Does anyone use argus client to intercept the cisco netflow data, I
> > have cisco router which is model 2821 and exporting the netflow
> > version 5 to remote port 9995 and using ra -CP 9995 to intercept it
> > and apparently I have this error
> >
> > shell>ra -CP 9995
> > ra[50834]: 21:02:29.477151 ArgusReadConnection(0x81fb000) unknown
> > source type
> >
> > By the way I would like to know is there any reference which
> > version of netflow is supported by argus because I can't find any
> > when googling. By the way, since radium is the multiplexor for the
> > argus data, will it add support for cisco netflow as well?
> >
> > Thanks.
> >
> > --
> > Best Regards,
> >
> > CS Lee<geekooL[at]gmail.com>
>
>
>


-- 
Best Regards,

CS Lee<geekooL[at]gmail.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20061105/0dc847a1/attachment.html>