search cancel

Recover old data from ReaperArchive15

book

Article ID: 252833

calendar_today

Updated On:

Products

CA Network Flow Analysis (NetQos / NFA)

Issue/Introduction

Files showing up in ReaperArchive15

The IP of the device is 9.17.160.105

[[email protected]]# pwd
/opt/CA/NFA/Netflow/datafiles/ReaperArchive15/009017160105/00000

[[email protected]]# ls -lrt
all 0
drwxrwxr-x 2 nfa nfa 95 Dec 17, 2021 1633824000
drwxrwxr-x 2 nfa nfa 95 Dec 18, 2021 1633910400
drwxrwxr-x 2 nfa nfa 95 Dec 19, 2021 1633996800
drwxrwxr-x 2 nfa nfa 95 Dec 20, 2021 1634083200
drwxrwxr-x 2 nfa nfa 95 Dec 21, 2021 1634169600
drwxrwxr-x 2 nfa nfa 95 Dec 22, 2021 1634256000
drwxrwxr-x 2 nfa nfa 95 Dec 23, 2021 1634342400
drwxrwxr-x 2 nfa nfa 95 Dec 24, 2021 1634428800
drwxrwxr-x 2 nfa nfa 95 Dec 25, 2021 1634515200
...
...
...
drwxrwxr-x 2 nfa nfa 95 Oct 16 23:15 1660003200
drwxrwxr-x 2 nfa nfa 303 Oct 17 02:01 1665964800
drwxrwxr-x 2 nfa nfa 95 Oct 17 23:16 1660089600
drwxrwxr-x 2 nfa nfa 303 Oct 18 02:01 1666051200

[[email protected] 00000]# cd 1666051200/
[[email protected] 1666051200]# ls -lrt
total 380
-rw-rw-r-- 1 nfa nfa 4914 Oct 18 11:01 tos_traffic.rpa15
-rw-rw-r-- 1 nfa nfa 16499 Oct 18 11:01 tos_protocol_traffic.rpa15
-rw-rw-r-- 1 nfa nfa 11824 Oct 18 11:01 protocol_traffic.rpa15
-rw-rw-r-- 1 nfa nfa 84868 Oct 18 11:01 tos_host_traffic_inet6.rpa15
-rw-rw-r-- 1 nfa nfa 61000 Oct 18 11:01 host_traffic_inet6.rpa15
-rw-rw-r-- 1 nfa nfa 115466 Oct 18 11:01 tos_conversation_traffic_inet6.rpa15
-rw-rw-r-- 1 nfa nfa 68776 Oct 18 11:01 conversation_traffic_inet6.rpa15
-rw-rw-r-- 1 nfa nfa 3932 Oct 18 11:01 as_traffic.rpa15
-rw-rw-r-- 1 nfa nfa 4904 Oct 18 11:01 as_nexthop_traffic.rpa15

 

Environment

Release : 20.2

Cause

A lot of the time Interface 0 aka the BC/MC interface continues to collect with an enabled state of 'Y' if a device is in RebootRefresh or if it's not configured properly.

Resolution

The /00000 is the broadcast/multicast folder

/opt/CA/NFA/Netflow/datafiles/ReaperArchive15/009017160105/00000

And if there is not other folders in /opt/CA/NFA/Netflow/datafiles/ReaperArchive15/009017160105/ than 00000 so doesn't have historical information

Interfaces 1, 2, 4, and 7 e etc they are represented in 0000x folders, example:
/opt/CA/NFA/Netflow/datafiles/ReaperArchive15/009017160105/00001
/opt/CA/NFA/Netflow/datafiles/ReaperArchive15/009017160105/00002
/opt/CA/NFA/Netflow/datafiles/ReaperArchive15/009017160105/00004
/opt/CA/NFA/Netflow/datafiles/ReaperArchive15/009017160105/00007
 

Check in the folders the timestamp 

Additional Information

In ReaperArchive15 directory is kept of intervals of 15 minutes historical of routers and interfaces.