The date and time in the flows are set by your flow exporter. Make sure
date and time is set correctly in all exporting engines in your router.
If everything fails, contact me off list.
- Peter
On 4/7/12 21:58, Alexandro Marcelo Zacaron wrote:
> Hi,
>
>
> I have problem that my flows are recorded with the date and time
> wrong, but if the duration is 0.000 date and time are correct.
>
>
> Sample file nfcapd.201203050850 for the period from 08:45am to 08:50am
> days of March 5, 2012.
> -----------------------------------------------------------------------------------------------------------------------------------------------------------------
>
> Date flow start Duration Proto Src IP Addr:Port
> Dst IP Addr:Port Packets Bytes Flows
>
> 2012-01-15 16:47:18.812 4294966.115 TCP 188.40.33.19:80 ->
> 10.1.1.15:42630 5 433 1
> 2012-03-05 08:50:04.936 0.000 ICMP 62.35.65.153:0 ->
> 10.1.1.10:3.1 1 123 1
> 2012-01-15 16:47:41.605 4294943.359 TCP 10.1.1.10:59402 ->
> 200.19.73.151:80 17 3421 1
> 2012-01-15 16:50:17.622 4294966.919 TCP 2.139.83.8:41069 ->
> 10.1.1.10:53294 1 40 1
> 2012-01-15 16:50:17.622 4294966.919 TCP 10.1.1.10:53294 ->
> 2.139.83.8:41069 1 52 1
> 2012-03-05 08:50:05.710 0.000 UDP 10.1.1.10:58615 ->
> 72.27.37.18:19159 1 95 1
> 2012-03-05 08:50:05.710 0.000 UDP 10.1.1.10:9140 ->
> 190.103.51.48:55914 1 95 1
> 2012-01-15 16:47:27.460 4294958.279 TCP 10.1.1.10:42544 ->
> 94.132.144.241:60746 3 152 1
> 2012-01-15 16:47:27.460 4294958.280 TCP 10.1.1.10:40644 ->
> 94.99.117.172:12404 3 152 1
> -----------------------------------------------------------------------------------------------------------------------------------------------------------------
>
>
>
> anybody can help-me?
>
> Thanks!
>
--
--
Be nice to your netflow data
------------------------------------------------------------------------------
Better than sec? Nothing is better than sec when it comes to
monitoring Big Data applications. Try Boundary one-second
resolution app monitoring today. Free.
http://p.sf.net/sfu/Boundary-dev2dev
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
