NFA Harvester Buffer Patch

Products

• CA Network Flow Analysis (NetQos / NFA)

Issue/Introduction

Network Flow Analysis has a bug it its Harvester Process buffer logic which does not allow netflow templates to be handled properly. This bug is known to create a lot of issues:

• Harvester process drops flows / packets which results in:
  • Harvester processing running behind.
  • Harvester data not processing at all.
  • Processed data appears inaccurate.
  • Processed data shows less than expected.
  • Harvester Buffer Utilization consistently high in Harvester-Wrapper.log

Environment

All NFA versions prior to NFA 22.2.5 (ETA January 2023).

Cause

A bug in the NFA Harvester process flow processor cache buffer. This is Defect: DE541581.

Resolution

The bug has been identified and the fix will be included in the NFA 22.2.5 (January 2023 Release).

We have released patches for customers who are experiencing the issues for select versions of NFA. If your version is not listed here, please open a ticket with Broadcom Support to see if we could accommodate you.

Currently patches are available for:

NFA 21.2.8   (Also includes data integrity patch fixes)

NFA 21.2.10 (Also includes the drive filling and C drive writing patch)

NFA 21.2.12

NFA 21.2.1

NFA 22.2.2

NFA 22.2.3

NFA 22.2.4

Patches can be found below for download.

1. Download the patch for your version and copy the file to all Harvesters.
2. Extract the contents.
3. Follow the included readme to get the the patch applied. 

Additional Information

If you cannot upgrade or patch you NFA enviornment, please see the below document for a possible temporary resolution:

Harvester is falling behind. "Max Buffer Used Percent" in the harvester-wrapper.log is showing over 90%