[EMAIL PROTECTED] CUFlow-1.7]# /usr/local/netflow/bin/flow-stat -f10 <
/var/netflow/ft/ft-v05.2007-04-19.142823-0400
# --- ---- ---- Report Information --- --- ---
#
# Fields: Total
# Symbols: Disabled
# Sorting: None
# Name: Source/Destination IP
#
# Args: /usr/local/netflow/bin/flow-stat -f10
#
#
# src IPaddr dst IPaddr flows octets
packets
#
[EMAIL PROTECTED] CUFlow-1.7]#
The flow-capture statment is:
[EMAIL PROTECTED] ft]# cat /etc/init.d/flow-capture-init
#!/bin/sh
# description: Start Flow-Capture
# chkconfig: 2345 95 00
case "$1" in
'start')
/usr/local/netflow/bin/flow-capture -w /var/netflow/ft 0/0/2055 -S5 -V5
-E1G -n 287 -N 0 -R /usr/local/netflow/bin/linkme
touch /var/lock/subsys/startflows
;;
'stop')
killall -9 /usr/local/netflow/bin/flow-capture
rm -f /var/lock/subsys/startflows
;;
*)
echo "Usage: $0 { start | stop }"
;;
esac
exit 0
[EMAIL PROTECTED] ft]#
Dwann A. Hall
Information Technology Services
Kennesaw State University
[EMAIL PROTECTED]
>>> Joe Loiacono <[EMAIL PROTECTED]> 4/19/2007 3:38:18 PM >>>
[EMAIL PROTECTED] wrote on 04/19/2007 02:45:51
PM:
> 2007/04/19 14:30:26 working on file
/var/netflow/ft-v05.2007-04-19.142823-0400...
Does the following show anything?
/var/netflow/flow-stat -f10 < ft-v05.2007-04-19.142823-0400
Are the flow files populated?
Looks like you're receiving alot of flows on your server. What is your
flow-capture command syntax?
Joe
_______________________________________________
Flow-tools mailing list
[EMAIL PROTECTED]
http://mailman.splintered.net/mailman/listinfo/flow-tools
