search

ntop / nProbe

Open source components and extensions for nProbe
http://ntop.org
GNU General Public License v2.0
1.65k stars 44 forks source link

MediaNet PktLoss, JitterMin, JitterMin, Jittermax all 0xFFFFFFFF. (decimal 4294967295) #183

Closed Virtela closed 7 years ago

Virtela commented 7 years ago

We found a blocking defect in the MediaNet table, that is we see MediaNet PktLoss, JitterMin, JitterMin, Jittermax all 0xFFFFFFFF. (decimal 4294967295) Without it, we cannot show any Medianet data. Please see the pcap we used to test.

{"APPLICATION_ID":"13:113","DIRECTION":1,"DST_AS":0,"EXPORTER_IPV4_ADDRESS":"100.64.48.32","FIRST_SWITCHED":1493944861,"INPUT_SNMP":14,"IN_BYTES":877,"IN_PKTS":2,"IPV4_DST_ADDR":"10.195.100.12","IPV4_DST_MASK":0,"IPV4_NEXT_HOP":"0.0.0.0","IPV4_SRC_ADDR":"146.238.53.102","IPV4_SRC_MASK":0,"L4_DST_PORT":36897,"L4_SRC_PORT":5061,"LAST_SWITCHED":1493944861,"OUTPUT_SNMP":16,"OUT_BYTES":0,"OUT_PKTS":0,"PROTOCOL":6,"SRC_AS":0,"SRC_TOS":0,"TCP_FLAGS":0,"TOTAL_BYTES_EXP":0,"TOTAL_PKTS_EXP":0,"MED_TRANSP_PKTS_LOST_COUNTER":4294967295,"MED_TRANSP_RTP_JITTER_MEAN":4294967295,"MED_TRANSP_RTP_JITTER_MIN":4294967295,"MED_TRANSP_RTP_JITTER_MAX":4294967295,"MED_APP_MEDIA_BYTES_RATE":25,"MED_APP_MEDIA_PKTS_RATE":0,"42":1752704}

image

lucaderi commented 7 years ago

Please share the command line option you are using as well attach the file containing custom fields definition

Virtela commented 7 years ago

--kafka="192.168.14.201:6667;avc_testing_multi_part_10;avc_testing_multi_part_10_options;0;none" --collector-port=2055 -i=none -n=none --city-list="/usr/share/ntopng/httpdocs/geoip/GeoLiteCity.dat" --as-list="/usr/share/ntopng/httpdocs/geoip/GeoIPASNum.dat" --unprivileged-user=netflow --hash-size=524288 --max-num-flows=4194304 --load-custom-fields=/etc/nprobe/custom_fields.txt --flow-templ "%APPLICATION_ID %DIRECTION %DST_AS %EXPORTER_IPV4_ADDRESS %FIRST_SWITCHED %INPUT_SNMP %IN_BYTES %IN_PKTS %IPV4_DST_ADDR %IPV4_DST_MASK %IPV4_NEXT_HOP %IPV4_SRC_ADDR %IPV4_SRC_MASK %L4_DST_PORT %L4_SRC_PORT %LAST_SWITCHED %OUTPUT_SNMP %OUT_BYTES %OUT_PKTS %PROTOCOL %SRC_AS %SRC_TOS %TCP_FLAGS %TOTAL_BYTES_EXP %TOTAL_PKTS_EXP %AVC_CONN_NEW_CONNECTIONS %AVC_SERVER_COUNTER_BYTES_LONG %AVC_CLIENT_COUNTER_BYTES_LONG %AVC_DELAY_NETWORK_TO_SERVER_SUM %AVC_DELAY_NETWORK_TO_CLIENT_SUM %AVC_CLIENT_COUNTER_PACKETS %AVC_DELAY_NETWORK_CLIENT_TO_SRV %AVC_DELAY_APPLICATION_SUM %AVC_DELAY_RESP_CLIENT_TO_SRV %AVC_TRANSACTION_DURATION_SUM %OPT_ROUTING_VRT_NAME %OPT_FLOW_SAMPLER %OPT_FLOW_SAMPLER_NAME %OPT_FLOW_ALGORITHIM_EXPORT %OPT_FLOW_SAMPLER_INTERVAL %OPT_FLOW_EXPORTER %MED_TRANSP_PKTS_LOST_COUNTER %MED_TRANSP_RTP_JITTER_MEAN %MED_TRANSP_RTP_JITTER_MIN %MED_TRANSP_RTP_JITTER_MAX %MED_APP_MEDIA_BYTES_RATE %MED_APP_MEDIA_PKTS_RATE %PFR_TIME_ABS_MON_INT %PFR_IPV4_DEST_PREFIX %PFR_SITE_DEST_ID_IPV4 %PFR_SITE_SRC_ID_IPV4 %PFR_ROUTING_VRF_OUTPUT %PFR_BR_IPV4 %PFR_LABEL_IDENTIFIER %PFR_INT_NAME_LONG %PFR_IPV4_DEST_MASK %PFR_RTP_JITTER_INT_ARV_MEAN %PFR_TRANSPORT_UNREACHABILITY %PFR_INGRESS_BW_LONG %PFR_MAX_INGRESS_BW %PFR_EGRESS_BW_LONG %PFR_MAX_EGRESS_BW" --verbose=2 -O=24

lucaderi commented 7 years ago

Please send me via email (deri@ntop.org) a pcap file and custom_fields.txt I can use to reproduce this bug

lucaderi commented 7 years ago

@Virtela Any news? Please also share the custom_fields.txt file as this is also necessary. Note that -O is used in debug mode only so it has no effect in your setup.

lucaderi commented 7 years ago

Closed for inactivity. Will reopen if necessary.