Hi Benjamin,
> I frequently process flow-files to make copies that are
> easier to digest for statistical purposes (e.g. I split
> source data per subnet). But it doesn't seem to work.
Just a note to say that I saw your message and have run into the same
problem. I believe the reason for the corruption is the same reason you
have to use flow-cat rather than cat to concatenate files.
A simple example of this problem
% flow-gen -n 1000 > test1
% flow-cat -m test1 | flow-stat -f 0 | grep octet
Average packet size (octets) : 1.0000
Average flow size (octets) : 500.0000
% flow-cat -m 1000 >> test1
% fcat test1 | flow-stat -f 0 | grep octet
Average packet size (octets) : 8.0000
Average flow size (octets) : 146677323.0000
^^^^^^ Should be 5000
The only way I know to get around this is to create one output file per
filter and then use flow-cat to collate them into a single file.
% flow-gen -n 1000 > test1
% flow-gen -n 1000 > test2
% flow-cat -m test1 test2 > test_all
% flow-cat -m test_all | flow-stat -f 0 | grep oct
Average packet size (octets) : 1.0000
Average flow size (octets) : 500.0000
% rm test2 test1
Perhaps some wiser users will know a better method?
Hope that helps
Alistair
**********************************************************************
Registered Office:
Marks and Spencer plc
Waterside House
35 North Wharf Road
London
W2 1NW
Registered No. 214436 in England and Wales.
Telephone (020) 7935 4422
Facsimile (020) 7487 2670
<<www.marksandspencer.com>>
Please note that electronic mail may be monitored.
This e-mail is confidential. If you received it by mistake, please let us know
and then delete it from your system; you should not copy, disclose, or
distribute its contents to anyone nor act in reliance on this e-mail, as this
is prohibited and may be unlawful.
2005
_______________________________________________
Flow-tools mailing list
[EMAIL PROTECTED]
http://mailman.splintered.net/mailman/listinfo/flow-tools
