[netsa-tools-discuss] incorrect flow times in silk 3.16

[Tim Stevenson]

Interestingly, I've discovered that this is only occurring for NFv9 
exports coming from Cisco NX-OS.

NFv5, from both IOS & NXOS, works fine.

Tim

At 10:22 AM 8/11/2017  Friday, Tim Stevenson opined:
>Hi,
>
>I'm having an odd problem with silk flow times in the data files 
>being created from NFv9 exports. The dates/times reported via 
>rwfilter are all ~10 days in the past.
>
>The server where silk is running (ubuntu 16.04.2 x64) is sync'd via 
>NTP, date output on the server is correct. The switch exporting the 
>data is also NTP sync'd to the same source and the date is correct 
>there as well.
>
>I've also captured the NDE packets coming from the switch and 
>decoded them via the CFLOW dissector in wireshark, all the 
>times/dates in those packets are correct as well.
>
>I tried recompiling with and without the localtime option, the 
>relative time/date changes but both are still resulting in dates in the past.
>
>Any suggestions on how to further debug this problem?
>
>Thanks,
>Tim
>
>
>
>
>
>Tim Stevenson, tstevens at cisco.com
>Routing & Switching CCIE #5561
>Distinguished Engineer, Technical Marketing
>Data Center Switching
>Cisco - http://www.cisco.com
>+1(408)526-6759





Tim Stevenson, tstevens at cisco.com
Routing & Switching CCIE #5561
Distinguished Engineer, Technical Marketing
Data Center Switching
Cisco - http://www.cisco.com
+1(408)526-6759