Hi Peter,
After aggregating an nfcapd file with -A, it doesn't look like the
aggregated flows field of the flow records is being used when total number
of flows is reported (e.g. nfdump -I, summary line for -s), or when a Top N
ordered by number of flows is run. Is that intended? It looks like -A is
quite useful for reducing files sizes and speeding up analysis, so I was
hoping the aggregated flow field would be used so that results aren't
affected.
Thanks, Karen
------------------------------------------------------------------------------
See everything from the browser to the database with AppDynamics
Get end-to-end visibility with application monitoring from AppDynamics
Isolate bottlenecks and diagnose root cause in seconds.
Start your free trial of AppDynamics Pro today!
http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk
_______________________________________________
Nfdump-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
