[netflow-tools] softflowd keeps crashing

[Damien Miller]

On Sun, 12 Apr 2009, alex k wrote:

> Hi Damien,
> 
> Softflowd crashed again.
> 
> In the nohup.out file I found the following:
> 
> Shutting down after pcap EOF
> Shutting down on user request
> Starting expiry scan: mode -1
> ...then a lot of...
> Queuing flow seq:102338 ... for expiry reason 6 (or 5, 1, 4)
> ...then a lot of...
> EXPIRED: seq:...
> 
> With nfdump I found again (at that time) entries with date about six weeks
> in the future.
> But no wrong date in nohup.out.

Are all the flows incorrectly dated, or just the ones from around the time
softflowd exited?

> What happened? Network error? Corrupted file? Socket problem?

Is anything restarting (bringing down and back up) the network interface
on which softflowd is listening? That can cause this sort of problem.
This line:

> Shutting down after pcap EOF

Indicates that libpcap has closed itself.

-d