If you are running NFA 9.5 or 10.0, you may run into an issue where data stops processing on the harvester servers.You may see one of these two unhandled exceptions in the Harvester-Wrapper.log:
INFO | jvm 1 | 2019/04/17 08:39:03 | java.lang.IllegalArgumentException: Length of IP Address and Subnet Mask do not match! INFO | jvm 1 | 2019/04/17 08:39:03 | at com.ca.im.ra.util.InetAddressUtility.applyMask(InetAddressUtility.java:236) INFO | jvm 1 | 2019/04/17 08:39:03 | at com.ca.im.ra.harvester.tbn.TBNEntry.getSubnetAddrBytes(TBNEntry.java:240) INFO | jvm 1 | 2019/04/17 08:39:03 | at com.ca.im.ra.harvester.tbn.TBNEntry.initialize(TBNEntry.java:222) INFO | jvm 1 | 2019/04/17 08:39:03 | at com.ca.im.ra.harvester.HarvesterProcessor.mapFlow(HarvesterProcessor.java:358) INFO | jvm 1 | 2019/04/17 08:39:03 | at com.ca.im.ra.harvester.HarvesterProcessor.createAndProcessTBNEntry(HarvesterProcessor.java:231) INFO | jvm 1 | 2019/04/17 08:39:03 | at com.ca.im.ra.harvester.HarvesterProcessor.processFlow(HarvesterProcessor.java:226) INFO | jvm 1 | 2019/04/17 08:39:03 | at com.ca.im.ra.flow.tools.FlowProcessor.execute(FlowProcessor.java:141) INFO | jvm 1 | 2019/04/17 08:39:03 | at com.ca.im.ra.flow.tools.FlowProcessor.run(FlowProcessor.java:81) INFO | jvm 1 | 2019/04/17 08:39:03 | at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source) INFO | jvm 1 | 2019/04/17 08:39:03 | at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) INFO | jvm 1 | 2019/04/17 08:39:03 | at java.lang.Thread.run(Unknown Source) INFO | jvm 1 | 2019/04/17 08:39:03 | 8:39:03 AM - [SEVERE ] - Unhandled Exception
INFO | jvm 1 | 2019/04/08 19:31:08 | java.lang.ArrayIndexOutOfBoundsException: -14 INFO | jvm 1 | 2019/04/08 19:31:08 | at com.ca.im.ra.util.InetAddressUtility.getSubnetMaskFromMaskCountForIPV6(InetAddressUtility.java:213) INFO | jvm 1 | 2019/04/08 19:31:08 | at com.ca.im.ra.harvester.tbn.TBNEntry.getSubnetAddrBytes(TBNEntry.java:239) INFO | jvm 1 | 2019/04/08 19:31:08 | at com.ca.im.ra.harvester.tbn.TBNEntry.initialize(TBNEntry.java:223) INFO | jvm 1 | 2019/04/08 19:31:08 | at com.ca.im.ra.harvester.HarvesterProcessor.mapFlow(HarvesterProcessor.java:358) INFO | jvm 1 | 2019/04/08 19:31:08 | at com.ca.im.ra.harvester.HarvesterProcessor.createAndProcessTBNEntry(HarvesterProcessor.java:231) INFO | jvm 1 | 2019/04/08 19:31:08 | at com.ca.im.ra.harvester.HarvesterProcessor.processFlow(HarvesterProcessor.java:226) INFO | jvm 1 | 2019/04/08 19:31:08 | at com.ca.im.ra.flow.tools.FlowProcessor.execute(FlowProcessor.java:141) INFO | jvm 1 | 2019/04/08 19:31:08 | at com.ca.im.ra.flow.tools.FlowProcessor.run(FlowProcessor.java:81) INFO | jvm 1 | 2019/04/08 19:31:08 | at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source) INFO | jvm 1 | 2019/04/08 19:31:08 | at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) INFO | jvm 1 | 2019/04/08 19:31:08 | at java.lang.Thread.run(Unknown Source) INFO | jvm 1 | 2019/04/08 19:31:08 | 7:31:08 PM - [SEVERE ] - Unhandled Exception
Cause
IPv6 conversations that use invalid RFC standard source or destination masks. IPv6 conversations that use IPv4 address manipulation can cause this.