Hello, I have a doubt about the way nfsen calculates statistics when flags -n and -c are given.
If I write: ----------------------------------------------------------------------------------------------------- nfdump -R /mydata -q -a -A srcip,dstip "net mynet/mymask" -n 1000 -c 100000 -o "fmt:%sa %da %byt" ----------------------------------------------------------------------------------------------------- the -n 1000 flag is used to show the top 1000 flows that will be shown in the resulting list and the -c 100000 flag refers to the amount of flows used to work (make the calculations). My doubt is the following: Where are the 100000 flows given in the -c flag taken from? A) 100000 flows per each flow archive (In /mydata I have flow files with the form yearmonthdayhour). In this case, if I have n archives, I would have the calculations made based on 100000*n flows, which is good for me. B) Merging (somehow) the n file flows in the /mydata directory and taking the first 100000 flows from that merge. Thank you! ------------------------------------------------------------------------------ Register Now for Creativity and Technology (CaT), June 3rd, NYC. CaT is a gathering of tech-side developers & brand creativity professionals. Meet the minds behind Google Creative Lab, Visual Complexity, Processing, & iPhoneDevCamp asthey present alongside digital heavyweights like Barbarian Group, R/GA, & Big Spaceship. http://www.creativitycat.com _______________________________________________ Nfsen-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
