Giter VIP home page Giter VIP logo

Comments (20)

TheWitness avatar TheWitness commented on June 24, 2024

What hardware vendor and device type is this? What is the streams flowview version (v9 or IPFIX)? We have been making heavy changes to the plugin. You might also want to consider downloading a fresh copy.

from plugin_flowview.

Catalyst4948 avatar Catalyst4948 commented on June 24, 2024

Cisco equipment model CISCO2911/K9 (revision 1.0)
I configured netflow v9 on it
1

from plugin_flowview.

TheWitness avatar TheWitness commented on June 24, 2024

Edit the listener, and then go to the Templates tab and take a screen grab and upload it.

from plugin_flowview.

TheWitness avatar TheWitness commented on June 24, 2024

I'll be committing a change shortly. You might want to grab that and do an upgrade too. I'll post here once it's done.

from plugin_flowview.

Catalyst4948 avatar Catalyst4948 commented on June 24, 2024

3

from plugin_flowview.

Catalyst4948 avatar Catalyst4948 commented on June 24, 2024

2
The following error started appearing in the logs

from plugin_flowview.

TheWitness avatar TheWitness commented on June 24, 2024

I suspect you have a protocol filter in place. Let me verify that this is working.

from plugin_flowview.

Catalyst4948 avatar Catalyst4948 commented on June 24, 2024

4
Yes, I only indicated it in the filters TCP and UDP Protocols

from plugin_flowview.

TheWitness avatar TheWitness commented on June 24, 2024

Grab the latest copy and of the plugin and then let's see what other errors are going on. Note that in Template 256, there is no Flow ID: 45, but there is for Template 258.

The reason that we are glad you are here is that we are trying to identify the minimal subset of Field ID's that constitute a full 'common' schema, and your Template 256 for that Cisco device tells us something new.

from plugin_flowview.

Catalyst4948 avatar Catalyst4948 commented on June 24, 2024

Sorry, I don’t quite understand what I need to do and how to select this Template

from plugin_flowview.

TheWitness avatar TheWitness commented on June 24, 2024

Download a fresh copy of the plugin, then:

php -q flowview_upgrade.php --forcever=3.3
systemctl restart flow-capture

from plugin_flowview.

TheWitness avatar TheWitness commented on June 24, 2024

The protocol errors should go away afterwards. You may see some errors when you update the plugin, but they should be transient.

from plugin_flowview.

Catalyst4948 avatar Catalyst4948 commented on June 24, 2024

6
I understand you were talking about these errors
when I made the transition to 3.3

from plugin_flowview.

Catalyst4948 avatar Catalyst4948 commented on June 24, 2024

7
somehow he began to behave strangely)

from plugin_flowview.

TheWitness avatar TheWitness commented on June 24, 2024

Take a fresh pull and those 'Column with field id' warnings should go away.

from plugin_flowview.

Catalyst4948 avatar Catalyst4948 commented on June 24, 2024

8
unfortunately it didn't give any results
the same errors keep popping up

from plugin_flowview.

TheWitness avatar TheWitness commented on June 24, 2024

Did you not update to the latest develop? Field 34 is no long required. You will have to restart flow-capture though...

from plugin_flowview.

TheWitness avatar TheWitness commented on June 24, 2024

Closing this one. If you still get those errors (not the 34 but the other ones), open a new ticket.

from plugin_flowview.

TheWitness avatar TheWitness commented on June 24, 2024

Ope, I know what the other issue is now. Stop using your own DNS and use local DNS for the moment. I have to fix some buggy code there. I'll open the ticket separately.

from plugin_flowview.

TheWitness avatar TheWitness commented on June 24, 2024

New bug here: #141

from plugin_flowview.

Related Issues (20)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.