ipt-netflow icon indicating copy to clipboard operation
ipt-netflow copied to clipboard

Incorrect time 1970-01-01 ipt_NETFLOW

Open maxbur89 opened this issue 10 months ago • 1 comments

Incorrect time 1970-01-01.

Version:

root@mxl-home:~# cat /proc/net/stat/ipt_netflow ipt_NETFLOW 2.6, srcversion C141F140579742E3722C704; dir mac nel promisc+mpls samp snmp vlan Protocol version 5 (netflow) Timeouts: active 1800s, inactive 15s. Maxflows 2000000 Flow sampling is disabled. Promisc hack is disabled (observed 0 packets, discarded 0). Natevents disabled, count start 0, stop 0. Flows: active 14 (peak 52 reached 0d0h1m ago), mem 3836K, worker delay 25/250 [1..25] (16 ms, 0 us, 14:0 [cpu3]). Hash: size 490738 (mem 3833K), metric 1.00 [1.00, 1.00, 1.00]. InHash: 18201 pkt, 21265 K, InPDU 31, 14976. Rate: 5248 bits/sec, 1 packets/sec; Avg 1 min: 67581 bps, 9 pps; 5 min: 287793 bps, 21 pps cpu# pps; <search found new [metric], trunc frag alloc maxflows>, traffic: <pkt, bytes>, drop: <pkt, bytes> Total 1; 0 36112 345 [1.00], 0 0 0 0, traffic: 36457, 40 MB, drop: 0, 0 K cpu0 0; 0 4218 86 [1.00], 0 0 0 0, traffic: 4304, 4 MB, drop: 0, 0 K cpu1 0; 0 4399 79 [1.00], 0 0 0 0, traffic: 4478, 4 MB, drop: 0, 0 K cpu2 0; 0 4370 65 [1.00], 0 0 0 0, traffic: 4435, 4 MB, drop: 0, 0 K cpu3 1; 0 23125 115 [1.00], 0 0 0 0, traffic: 23240, 26 MB, drop: 0, 0 K Export: Rate 366 bytes/s; Total 11 pkts, 0 MB, 330 flows; Errors 0 pkts; Traffic lost 0 pkts, 0 Kbytes, 0 flows. sock0: 127.0.0.1:2055, sndbuf 212992, filled 1, peak 1; err: sndbuf reached 0, connect 0, cberr 11, other 0

Debian 12.9 root@mxl-home:~# uname -a Linux mxl-home 6.1.0-31-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.128-1 (2025-02-07) x86_64 GNU/Linux

Package: iptables-netflow-dkms 2.6-4

System time is correct: root@mxl-home:~# date Вс 16 фев 2025 23:52:30 +07

When intercepting traffic, it is clear that the time is incorrect (screenshot attached): Image

maxbur89 avatar Feb 16 '25 16:02 maxbur89

I rebuilt nfdump from git. The time shows correctly. But there is another problem with the status of the nat translation

Sanyasi avatar Mar 31 '25 15:03 Sanyasi