On Wed, Jul 16, 2008 at 04:02:59PM +0100, Stuart Henderson wrote: > I'll be fairly surprised if this is actually correct, but at least > it builds and appears to display the right addresses and port numbers. > > "mkdir patches" before applying..
Works fine from my limited tests. A single capture from pfflowd -> flowd -> Net::Flowd... $VAR1 = { 'protocol' => 17, 'dst_addr_af' => 2, 'flow_ver' => 96, 'time_sec' => 1216331674, 'dst_addr' => '10.80.117.2', 'if_index_out' => 0, 'gateway_addr_af' => 2, 'src_as' => 0, 'gateway_addr' => '0.0.0.0', 'recv_usec' => 320051, 'agent_addr_af' => 2, 'flow_packets' => 1, 'agent_addr' => '127.0.0.1', 'tcp_flags' => 0, 'src_addr' => '10.80.116.137', 'source_id' => 0, 'netflow_version' => 5, 'flow_sequence' => 156, 'engine_id' => 0, 'dst_port' => 53, 'flow_start' => 550717, 'flow_octets' => 116, 'src_addr_af' => 2, 'dst_as' => 0, 'time_nanosec' => 319992000, 'tos' => 0, 'if_index_in' => 0, 'dst_mask' => 0, 'sys_uptime_ms' => 582717, 'src_port' => 44361, 'crc' => 2427304551, 'src_mask' => 0, 'recv_sec' => 1216331674, 'fields' => 1074264750, 'flow_finish' => 582717, 'engine_type' => 0 };