[Ntop-dev] Template len mismatch

[Luca Deri]

Roel
please send the pcap file (full packets please) so I can reproduce the  
problem

Luca

On May 11, 2009, at 3:26 PM, R.H.Hoek wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
>
> Dear all,
>
>
> (I have send this message already, about two months ago, to the wrong
> mail-list. I will give it another try.)
>
> After downloading and compiling and installing the lates Ntop from svn
> and configuring two NetFlow interfaces I see a lot of "**WARNING**
> Template len mismatch" and sometimes a "**WARNING** Template <number>
> has wrong size" messages in the syslog.
>
> I have captured with tshark the netflowdata in a period that caused  
> the
> warning messages (1.7MB).
> The two netflowstreams comes from two Cisco 6509 with sub 720-3B  
> running
> IOS version 12.2SXI
>
> In August 2008 Janaka reported the same issue. Luca responded with the
> question to send some netflow packets.
>
> If you want I can send you de capture file.
>
>
>
> Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
> [tot_len=52][flow_len=56]
> Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
> [tot_len=52][flow_len=56]
> Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
> [tot_len=52][flow_len=56]
> Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
> [tot_len=52][flow_len=56]
> Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
> [tot_len=52][flow_len=56]
> Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
> [tot_len=52][flow_len=56]
> Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
> [tot_len=52][flow_len=56]
> Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
> [tot_len=52][flow_len=56]
> Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
> [tot_len=52][flow_len=56]
> Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
> [tot_len=52][flow_len=56]
> Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
> [tot_len=52][flow_len=56]
> Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
> [tot_len=52][flow_len=56]
> Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
> [tot_len=52][flow_len=56]
> Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
> [tot_len=52][flow_len=56]
> Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
> [tot_len=52][flow_len=56]
> Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
> [tot_len=52][flow_len=56]
> Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
> [tot_len=52][flow_len=56]
> Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
> [tot_len=52][flow_len=56]
> Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
> [tot_len=52][flow_len=56]
> Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
> [tot_len=52][flow_len=56]
> Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
> [tot_len=52][flow_len=56]
> Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
> [tot_len=52][flow_len=56]
> Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
> [tot_len=52][flow_len=56]
> Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
> [tot_len=52][flow_len=56]
> Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
> [tot_len=52][flow_len=56]
> Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
> [tot_len=52][flow_len=56]
> Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
> [tot_len=52][flow_len=56]
> Mon May 11 15:03:12 2009  **WARNING** Template len mismatch
> [tot_len=52][flow_len=56]
> Mon May 11 15:03:13 2009  **WARNING** Template len mismatch
> [tot_len=52][flow_len=56]
> Mon May 11 15:03:13 2009  **WARNING** Template len mismatch
> [tot_len=52][flow_len=56]
> Mon May 11 15:03:13 2009  **WARNING** Template len mismatch
> [tot_len=52][flow_len=56]
> Mon May 11 15:03:13 2009  **WARNING** Template len mismatch
> [tot_len=52][flow_len=56]
> Mon May 11 15:03:13 2009  **WARNING** Template len mismatch
> [tot_len=52][flow_len=56]
> Mon May 11 15:03:13 2009  **WARNING** Template len mismatch
> [tot_len=52][flow_len=56]
> Mon May 11 15:03:13 2009  **WARNING** Template len mismatch
> [tot_len=52][flow_len=56]
> Mon May 11 15:03:13 2009  **WARNING** Template len mismatch
> [tot_len=52][flow_len=56]
> Mon May 11 15:03:13 2009  **WARNING** Template len mismatch
> [tot_len=52][flow_len=56]
> Mon May 11 15:03:13 2009  **WARNING** Template len mismatch
> [tot_len=52][flow_len=56]
> Mon May 11 15:03:13 2009  **WARNING** Template len mismatch
> [tot_len=52][flow_len=56]
> Mon May 11 15:03:13 2009  **WARNING** Template len mismatch
> [tot_len=52][flow_len=56]
> Mon May 11 15:03:13 2009  **WARNING** Template len mismatch
> [tot_len=52][flow_len=56]
> Mon May 11 15:03:13 2009  **WARNING** Template len mismatch
> [tot_len=1356][flow_len=1396]
> Mon May 11 15:03:14 2009  **WARNING** Template 257 has wrong size
> [actual=8/expected=0]: skipped
> Mon May 11 15:03:14 2009  **WARNING** Template len mismatch
> [tot_len=1356][flow_len=1396]
> Mon May 11 15:03:14 2009  **WARNING** Template len mismatch
> [tot_len=4][flow_len=18]
>
>
> - --
>
> Roel Hoek
> ICT Service Centre
> University of Twente, P.O.Box 217, 7500 AE Enschede, The Netherlands
> Telephone +31 53 489 4598, Fax +31 53 489 2383
> R.H.Hoek at utwente.nl; http://www.utwente.nl/icts
>
>
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.9 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>
> iEYEARECAAYFAkoIJ2wACgkQJwlRSGnYBcbpOwCfUaGq89DpewwAt92+YL/mI8VN
> ViEAnierk+On7lSB0CcwYUBPZuWu+tAC
> =e135
> -----END PGP SIGNATURE-----
> _______________________________________________
> Ntop-dev mailing list
> Ntop-dev at unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop-dev