search cancel

After Upgrade to 21.2.10, one of our Harvester servers is outputting an error for all interface pages.

book

Article ID: 243102

calendar_today

Updated On:

Products

CA Network Flow Analysis (NetQos / NFA)

Issue/Introduction

After Upgrade to 21.2.10, one of our Harvester servers is outputting an error for all interface pages.

An error occurred!
Control(30002): Stacked Protocol Trend - In
A Unable to connect to any of the specified MySQL hosts. error was returned:

...

The Netflow\Logs\oursql*.log file on the harvester shows queries to the 'ahtflows' table like this:

Trying to get some variables.

Some pointers may be invalid and cause the dump to abort.

Query (8ad14d9c7b): select srcaddr as hostAddr, count(*) as amountPerHost, ifnull(count(*)/ (@timeDiff / 60 ), count(*)) as averageMetric FROM ahtflows     where ( timestamp > 1654189918 ) and ( timestamp <= 1654190280 ) group  by hostAddr order by amountPerHost desc limit 10

Connection ID (thread ID): 22

Status: NOT_KILLED

Cause

Anomaly Detector component was running and attempting to query the Harvester's mysql database on port 3307.

The AD component has been deprecated, and it is not recommended to run this component in an NFA 21.2.x environment.

Environment

Release : 21.2

Component : NQRAHV - NETQOS RA HARVESTER

Resolution

 

Check whether you still have old "Anomaly Detectory" services running somewhere in your environment that are still hitting the Harvesters. Other that FF and Analysis Reports, that component also queries the "ahtflows" table.

The AD component has been deprecated, so if you are still running the either of the following services on any of your machines we would recommend stopping them:

"CA NFA Hunter Tracker Service

"CA NFA Host Resolver Service"

 

Additional Information

CA Anomaly Detector (Deprecated) (broadcom.com)