Hi all. In fields FIRST and LAST in a stream should be system uptime during reception of the first package and during reception of the last
When i use 'softflowd' software sensor - all OK (see below), but when i use pflow interface then in fields FIRST and LAST i see huge values. Maybe somebody knows, what mean these values ? 2:56 PM, up 3 mins - flow collection begin with softflowd --------------------- UNIX_SECS=1244458921 # 2009-06-08 15:02:01 +04 SYSUPTIME=363460 # 363460/1000/60 = 6 mins FIRST=60073 # LAST=60090 # --------------------- 9:17 AM, up 18 mins - flow collection begin with pflow --------------------- UNIX_SECS=1244351870 # 2009-06-07 09:17:50 +04 SYSUPTIME=1119000 # 1119000/60/1000=18.6 MIN FIRST=3106274456 # ???? LAST=3106291456 # ???? ---------------------
