NFA 9.5 / 10.0.0 / 10.0.1 Harvester Process Error

Products

• CA Network Flow Analysis (NetQos / NFA)

Issue/Introduction

If you are running NFA 9.5 or 10.0, you may run into an issue where data stops processing on the harvester servers.You may see one of these two unhandled exceptions in the Harvester-Wrapper.log:

INFO | jvm 1 | 2019/04/17 08:39:03 | java.lang.IllegalArgumentException: Length of IP Address and Subnet Mask do not match! 
INFO | jvm 1 | 2019/04/17 08:39:03 | at com.ca.im.ra.util.InetAddressUtility.applyMask(InetAddressUtility.java:236) 
INFO | jvm 1 | 2019/04/17 08:39:03 | at com.ca.im.ra.harvester.tbn.TBNEntry.getSubnetAddrBytes(TBNEntry.java:240) 
INFO | jvm 1 | 2019/04/17 08:39:03 | at com.ca.im.ra.harvester.tbn.TBNEntry.initialize(TBNEntry.java:222) 
INFO | jvm 1 | 2019/04/17 08:39:03 | at com.ca.im.ra.harvester.HarvesterProcessor.mapFlow(HarvesterProcessor.java:358) 
INFO | jvm 1 | 2019/04/17 08:39:03 | at com.ca.im.ra.harvester.HarvesterProcessor.createAndProcessTBNEntry(HarvesterProcessor.java:231) 
INFO | jvm 1 | 2019/04/17 08:39:03 | at com.ca.im.ra.harvester.HarvesterProcessor.processFlow(HarvesterProcessor.java:226) 
INFO | jvm 1 | 2019/04/17 08:39:03 | at com.ca.im.ra.flow.tools.FlowProcessor.execute(FlowProcessor.java:141) 
INFO | jvm 1 | 2019/04/17 08:39:03 | at com.ca.im.ra.flow.tools.FlowProcessor.run(FlowProcessor.java:81) 
INFO | jvm 1 | 2019/04/17 08:39:03 | at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source) 
INFO | jvm 1 | 2019/04/17 08:39:03 | at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) 
INFO | jvm 1 | 2019/04/17 08:39:03 | at java.lang.Thread.run(Unknown Source) 
INFO | jvm 1 | 2019/04/17 08:39:03 | 8:39:03 AM - [SEVERE ] - Unhandled Exception


INFO | jvm 1 | 2019/04/08 19:31:08 | java.lang.ArrayIndexOutOfBoundsException: -14 
INFO | jvm 1 | 2019/04/08 19:31:08 | at com.ca.im.ra.util.InetAddressUtility.getSubnetMaskFromMaskCountForIPV6(InetAddressUtility.java:213) 
INFO | jvm 1 | 2019/04/08 19:31:08 | at com.ca.im.ra.harvester.tbn.TBNEntry.getSubnetAddrBytes(TBNEntry.java:239) 
INFO | jvm 1 | 2019/04/08 19:31:08 | at com.ca.im.ra.harvester.tbn.TBNEntry.initialize(TBNEntry.java:223) 
INFO | jvm 1 | 2019/04/08 19:31:08 | at com.ca.im.ra.harvester.HarvesterProcessor.mapFlow(HarvesterProcessor.java:358) 
INFO | jvm 1 | 2019/04/08 19:31:08 | at com.ca.im.ra.harvester.HarvesterProcessor.createAndProcessTBNEntry(HarvesterProcessor.java:231) 
INFO | jvm 1 | 2019/04/08 19:31:08 | at com.ca.im.ra.harvester.HarvesterProcessor.processFlow(HarvesterProcessor.java:226) 
INFO | jvm 1 | 2019/04/08 19:31:08 | at com.ca.im.ra.flow.tools.FlowProcessor.execute(FlowProcessor.java:141) 
INFO | jvm 1 | 2019/04/08 19:31:08 | at com.ca.im.ra.flow.tools.FlowProcessor.run(FlowProcessor.java:81) 
INFO | jvm 1 | 2019/04/08 19:31:08 | at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source) 
INFO | jvm 1 | 2019/04/08 19:31:08 | at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) 
INFO | jvm 1 | 2019/04/08 19:31:08 | at java.lang.Thread.run(Unknown Source) 
INFO | jvm 1 | 2019/04/08 19:31:08 | 7:31:08 PM - [SEVERE ] - Unhandled Exception 
 

Cause

IPv6 conversations that use invalid RFC standard source or destination masks. 
IPv6 conversations that use IPv4 address manipulation can cause this.

Environment

NFA 9.5

NFA 10.0.0

NFA 10.0.1

Resolution

NFA 9.5:

1. First Apply Cumulative Patch for NFA 9.5

2. Now download: NFA_9.5.0_PTF_012.zip

3. Extract the file and follow the instruction in the readme.

NFA 10.0.0:

1. Apply NFA_10.0.0_PTF_002.zip

NFA 10.0.1

1. Apply NFA_10.0.1_PTF_001.zip