On Wed, Feb 28, 2007 at 01:05:54PM -0500, Michael Graziano wrote:
> >
> > I'm seeing something similar. I happened to be doing a 'top' from the
> > command-line right after staring up several flow-captures. Was
> > surprised to see them start to take up 30-40% and higher CPU.
Are you using the "-e" or "-E" options with flow-capture? Guess how it
detects how many files you have in the existing tree (-e), or how much
space they take up (-E). That's right, it does a walk through every
directory in your capture tree, and stats every file in order to get
the size if you used "-E". While it's doing that, I don't think
there's any capturing taking place.
You can watch the fun for yourself by running "lsof" or ("fstat" if you're
on a BSD system) and look at the filenames it has open, and how they change
every few seconds.
_______________________________________________
Flow-tools mailing list
[EMAIL PROTECTED]
http://mailman.splintered.net/mailman/listinfo/flow-tools
