Sounds like you have the mls flow mas at the default, which is destination. Change it to be full.
Ian
At 04:08 PM 4/26/2004 +0800, Joe Shen wrote:
Hi,
When trying to process netflow data exported from a Catalyst6509 box (version 7),
I print data file content by
flow-print -f 24 < ./ft-v07.2004-04-09.165326+0800 > $HOME/test.txt
But, it shows , all Sif is "0000", and all SrcIPaddress is "0.0.0.0 ", and Pr is "00", P is "0".
Why? Doesn't netflow v7 include these information?
Another question, could flow-merge maintein time stamp of each flow?
Regards
Joe Shen
_______________________________________________
Flow-tools mailing list
[EMAIL PROTECTED]
http://mailman.splintered.net/mailman/listinfo/flow-tools
_______________________________________________ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools
