Hi �� after re-compiling cflow under contrib directory, flowscan can process flow-cap files, but it always shows flow hit rate is 0 ( see below). If I turn to CampusIO, it shows no-zero hit rate.
I graph data with CUGraph.pl, and find only the first recording file is recorded no matter how many flow files have been processed. I defined every subnets inside our network, but even I only define Subnet as "Subnet 10.10.0.0/24" it only update with first flow-cap file. Why? =========================== [EMAIL PROTECTED] bin]$ flowscan 2004/11/23 19:04:53 working on file /home/sj/bin/flowscan/ft/ft-v05.2004-11-18.180721+0800... 2004/11/23 19:08:46 flowscan-1.020 CUFlow: Cflow::find took 233 wallclock secs (231.39 usr + 0.17 sys = 231.56 CPU) for 106352795 flow file bytes, flow hit ratio: 0/5039529 2004/11/23 19:08:46 flowscan-1.020 CUFlow: report took 0 wallclock secs ( 0.00 usr + 0.00 sys = 0.00 CPU) 2004/11/23 19:08:46 working on file /home/sj/bin/flowscan/ft/ft-v05.2004-11-18.183645+0800... [EMAIL PROTECTED] bin]$ ===================================== [EMAIL PROTECTED] bin]$ flowscan NextHops and OutputIfIndexes are undefined. Identifying outbound flows based solely on destination address ... Loading "Napster_subnets.boulder" ... Loading "local_nets.boulder" ... 2004/11/23 18:41:45 working on file /home/sj/bin/flowscan/ft/ft-v05.2004-11-18.170835+0800... Loading "asn.txt" ... 65536 ASNs loaded. 2004/11/23 18:48:55 flowscan-1.020 CampusIO: Cflow::find took 430 wallclock secs (426.56 usr + 0.30 sys = 426.86 CPU) for 104919878 flow file bytes, flow hit ratio: 3259/5006399 2004/11/23 18:48:55 flowscan-1.020 CampusIO: report took 0 wallclock secs ( 0.13 usr + 0.01 sys = 0.14 CPU) 2004/11/23 18:48:55 working on file /home/sj/bin/flowscan/ft/ft-v05.2004-11-18.173758+0800... 2004/11/23 18:56:13 flowscan-1.020 CampusIO: Cflow::find took 438 wallclock secs (435.13 usr + 0.22 sys = 435.35 CPU) for 104546946 flow file bytes, flow hit ratio: 3499/4979659 ======================================== In 2004��11��23�գ�1:03:13 you said: > Hi, > Dan Benson wrote: >> >> 2004/11/22 11:10:03 working on file >> /netflow/ft-v05.2004-11-22.110500-0500... >> /netflow/ft-v05.2004-11-22.110500-0500: Invalid index in cflowd flow file: >> 0xCF100103! Version 5 flow-export is required with *all* fields being > Please see: > http://mailman.splintered.net/pipermail/flow-tools/2004-November/002447.html > If it doesn't work, let us know. > Bye, -- -- -- Regards Jing Shen ****************************************** * The sunshine of lifetime is made up of * * little beams which is bright all the * * time. * ****************************************** _______________________________________________ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools
