Hello. I found a problem when try to export netflow from to routers A and B to collector C. Router A follows router B , when packet goes to internet it passes A than B (for example). I try to say that flows becoming collector C for that packet (connection) will be identical. Can I detect duplicated flows and strip them by flow-tools package?
Second way to solve this problem it is use filters on exporters A and B, but it very complicated. Some info about this trouble i had: flow-print -f5 < ft_dup (| grep) 1227.12:16:27.863 1227.12:16:27.863 0 212.110.147.72 138 0 212.110.147.255 138 17 0 1 229 1227.12:16:27.863 1227.12:16:27.863 0 212.110.147.72 138 0 212.110.147.255 138 17 0 1 229 seems to be identical, but: flow-export -f2 < ft_dup 1135678653,8543000,1048580947,127.0.0.1,1,229,1048515802,1048515802,0,0,212.1 10.147.72,212.110.147.2 1135678655,8498000,1048580978,127.0.0.1,1,229,1048513833,1048513833,0,0,212. 110.147.72,212.110.147.2 shows different time... Thanx for your time. -- Wbr, alt Debian GNU/Linux 3.1 Linux 2.6.13 _______________________________________________ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools
