Hi,
Obviously your exporting device has wrong time settings. nfdump stores dates in
UNIX time format and adjusts the timezone.
Check the time/timezone of your router.
- Peter
On 18/8/10 9:06 AM, [email protected] wrote:
> Dear All :
>
> Thank for your good share, I have a question ? ( my english is poor, i
> hope you can understand my word)
>
> my profileinfo is below , my data start from Jun 15 2009-16:15 CST
> =============
> Profileinfo:
> Type:
> live
> Max:
> unlimited
> Exp:
> never
> Start:
> Jun 15 2009 - 16:15 CST
> End:
> Aug 18 2010 - 11:15 CST
>
> when i process a query ---Date first---- alway show 1993-03-03 like below
> =============================
> ** nfdump -M /usr/local/nfsen/profiles-data/live/MLRouter -T -R
> 2010/08/18/07/nfcapd.201008180720:2010/08/18/09/nfcapd.201008180900 -n 10
> -s ip/flows
> nfdump filter:
> Top 10 IP Addr ordered by flows:
> Date first seen Duration Proto IP Addr Flows Packets
> Bytes pps bps bpp
> 1993-03-03 02:31:35.044 550996881.852 any 203.69.132.68 70478 1.2
> M 862.7 M 0 13 709
> 1993-03-03 02:52:18.703 5096.911 any 192.168.247.42 37673 549369
> 378.2 M 107 622374 721
> 1993-03-03 02:32:02.358 550996837.466 any 203.69.132.159 17142
> 129404 14.2 M 0 0 114
> 1993-03-03 02:25:22.417 550997239.339 any 203.69.135.1 4925
> 140424 16.8 M 0 0 125
> 1993-03-03 03:06:39.891 4207.894 any 192.168.247.18 4433 18381
> 2.7 M 4 5343 152
> 1993-03-03 02:50:53.467 550995383.953 any 192.168.244.115 3012
> 62870 34.2 M 0 0 569
> 1993-03-03 02:02:31.201 550998612.803 any 255.255.255.255 2773
> 63651 20.4 M 0 0 335
> 1993-03-03 03:10:29.639 550994120.737 any 192.168.244.45 2738
> 32250 9.1 M 0 0 294
> 1993-03-03 02:50:37.505 5170.312 any 192.168.247.146 2733 26394
> 13.5 M 5 21942 537
> 1993-03-03 02:31:56.713 550996834.931 any 203.69.135.19 2636
> 20163 3.9 M 0 0 202
>
> time windows start is show 1993-03-03
> =============
> Summary: total flows: 148584, total bytes: 2.4 G, total packets: 5.1 M,
> avg bps: 36, avg pps: 0, avg bpp: 470
> Time window: 1993-03-03 02:02:31 - 2010-08-18 09:12:58
>
> so , Can you show me how i am wrong and how to correct it
>
> Thank you very much
>
> ============================
> 長春石化 資訊中心
> 黃明輝
> TEL: 02-2500-1756
> FAX: 02-2518-7988
>
>
>
>
> ------------------------------------------------------------------------------
> This SF.net email is sponsored by
>
> Make an app they can't live without
> Enter the BlackBerry Developer Challenge
> http://p.sf.net/sfu/RIM-dev2dev
>
>
>
> _______________________________________________
> Nfsen-discuss mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
--
Be nice to your netflow data. Use NfSen and nfdump :)
------------------------------------------------------------------------------
This SF.net email is sponsored by
Make an app they can't live without
Enter the BlackBerry Developer Challenge
http://p.sf.net/sfu/RIM-dev2dev
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
