[netsa-tools-discuss] sFlow logs

[Mark Thomas]

Ali-

There is an issue/bug in SiLK 3.10.0 and SiLK 3.10.1.  The log
message you see was intended only to be printed when the sensor.conf
file included the statement

  log-flags record-timestamps

However, printing of that statement was always enabled.

This has been fixed in SiLK 3.10.2.

-Mark


-----Original Message-----
From: "Kapucu, Ali" <akapucu at kent.edu>
Date: Tue, 9 Jun 2015 14:28:50 +0000
To: "netsa-tools-discuss at cert.org" <netsa-tools-discuss at cert.org>
Subject: Re: [netsa-tools-discuss] sFlow logs

Sorry I did not put my question here.


What am i missing here. Do i need to modify silk configuration or do i need to configure my router?


Thanks
________________________________
From: netsa-tools-discuss-bounces+akapucu=kent.edu at cert.org <netsa-tools-discuss-bounces+akapucu=kent.edu at cert.org> on behalf of Kapucu, Ali <akapucu at kent.edu>
Sent: Tuesday, June 9, 2015 10:21 AM
To: netsa-tools-discuss at cert.org
Subject: [netsa-tools-discuss] sFlow logs


Hi,

I just started receving sflow from our juniper routers


rwflowpack log filling up with these logs


Jun  9 10:17:25 flowtracker rwflowpack[3882]: 'JCLIB': No record times, set start and end to exportTimeSeconds=1433859445
Jun  9 10:17:25 flowtracker rwflowpack[3882]: 'JCLIB': No record times, set start and end to exportTimeSeconds=1433859445
Jun  9 10:17:25 flowtracker rwflowpack[3882]: 'JCLIB': No record times, set start and end to exportTimeSeconds=1433859445
Jun  9 10:17:25 flowtracker rwflowpack[3882]: 'JCLIB': No record times, set start and end to exportTimeSeconds=1433859445
Jun  9 10:17:25 flowtracker rwflowpack[3882]: 'JCLIB': No record times, set start and end to exportTimeSeconds=1433859445
Jun  9 10:17:25 flowtracker rwflowpack[3882]: 'JCLIB': No record times, set start and end to exportTimeSeconds=1433859445
Jun  9 10:17:25 flowtracker rwflowpack[3882]: 'JCLIB': No record times, set start and end to exportTimeSeconds=1433859445
Jun  9 10:17:25 flowtracker rwflowpack[3882]: 'JCLIB': No record times, set start and end to exportTimeSeconds=1433859445
Jun  9 10:17:25 flowtracker rwflowpack[3882]: 'JCLIB': No record times, set start and end to exportTimeSeconds=1433859445


sensor.conf entry


   probe JCLIB sflow
     listen-on-port 6343
     protocol udp
     end probe
     sensor JCLIB
     sflow-probes JCLIB

  internal-ipblock 10.0.0.0/8

     external-ipblock remainder
     end sensor

--
Ali Kapucu | CCNP Route & Switch, CCNA Wireless, CCNA Security, Security+, MCP
Kent State University | Security & Access Management
Work: 330-672-4873 | Cell: 330-389-4873 | E-mail: akapucu at kent.edu
PGP Public Key: http://www.personal.kent.edu/~akapucu/ali-kapucu.asc
PGP Finger Print: 8C74 F95A 7B08 641A A1AD 9AF3 CDA3 1F70 0F5C C221