Hi, I want to use sflow-toolkit of InMon to convert sflow raw flow to netflow raw flow. But I find the fields of packet length and Octets are not correct?
Is anyone here met similar problem before? # /usr/local/netflow/bin/flow-print -f 5 < ft-v05.2006-05-17.195316+0800 | more Start End Sif SrcIPaddress SrcP DIf DstIPaddress DstP P Fl Pkts Octets 0517.19:53:16.000 0517.19:53:16.000 3001 10.21.96.242 2340 0 87.5.150.145 4662 6 0 500 569000 0517.19:53:16.000 0517.19:53:16.000 7006 172.20.248.100 554 0 10.24.93.69 2574 6 0 500 569000 0517.19:53:16.000 0517.19:53:16.000 7005 172.20.248.99 554 0 10.16.64.244 1521 6 0 500 569000 0517.19:53:16.000 0517.19:53:16.000 3005 172.20.250.56 8886 0 172.16.168.101 1054 17 0 500 11000 0517.19:53:16.000 0517.19:53:16.000 6028 61.241.71.107 80 0 222.192.176.101 2003 6 0 500 750000 0517.19:53:16.000 0517.19:53:16.000 8004 172.16.32.190 4000 0 219.133.38.166 8000 17 0 500 22000 0517.19:53:16.000 0517.19:53:16.000 8002 210.51.216.24 30113 0 210.51.182.67 4824 6 0 500 23000 _______________________________________________ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools
