DX Unified Infrastructure Management

  • Private Community

  • 1.  Harvester falling behind processing netflow data

    Posted Mar 23, 2015 09:00 PM

    Hello!

     

    I am experiencing issue with one of the harvesters (v 9.2.1) installed in our environment.  It runs on Windows Server 2008 R2 VM.  It is permanently falling behind with processing netflow data.  Most of the netflow comes as v 9.  Wireshark capture on port 9995 shows lots of packets with bad checksum:

    BadChecksum.png

    The \CA\NFA\Netflow\datafiles\HarvesterWork folder shows always 2 files but the size and timestamps change very infrequently.  It seems like harvester waits for data rather then doing anything else.

     

    Any help, any feedback very appreciated,

    Mariusz



  • 2.  Re: Harvester falling behind processing netflow data

    Broadcom Employee
    Posted Jun 09, 2015 02:46 PM

    Are you still having this problem?

     

     

    Do you know how many flows per minute this Harvester is trying to handle?

    You can use the NASTv13 tool to get the flows per minute rate on the Harvester Tech Tips: NASTv13.exe available for NFA 9.1.3 and NFA 9.2

     

    If you are not seeing data at all you may want to review this doc which has a patch Tech Tip: Harvester not showing data after clean NFA 9.2.1 install or upgrade to NFA 9.2.1 if you are seeing the same error in the logs as described in the doc.