On Wed, Jul 16, 2008 at 04:02:59PM +0100, Stuart Henderson wrote:
> I'll be fairly surprised if this is actually correct, but at least
> it builds and appears to display the right addresses and port numbers.
> 
> "mkdir patches" before applying..

Works fine from my limited tests.  A single capture from pfflowd ->
flowd -> Net::Flowd...

$VAR1 = {
          'protocol' => 17,
          'dst_addr_af' => 2,
          'flow_ver' => 96,
          'time_sec' => 1216331674,
          'dst_addr' => '10.80.117.2',
          'if_index_out' => 0,
          'gateway_addr_af' => 2,
          'src_as' => 0,
          'gateway_addr' => '0.0.0.0',
          'recv_usec' => 320051,
          'agent_addr_af' => 2,
          'flow_packets' => 1,
          'agent_addr' => '127.0.0.1',
          'tcp_flags' => 0,
          'src_addr' => '10.80.116.137',
          'source_id' => 0,
          'netflow_version' => 5,
          'flow_sequence' => 156,
          'engine_id' => 0,
          'dst_port' => 53,
          'flow_start' => 550717,
          'flow_octets' => 116,
          'src_addr_af' => 2,
          'dst_as' => 0,
          'time_nanosec' => 319992000,
          'tos' => 0,
          'if_index_in' => 0,
          'dst_mask' => 0,
          'sys_uptime_ms' => 582717,
          'src_port' => 44361,
          'crc' => 2427304551,
          'src_mask' => 0,
          'recv_sec' => 1216331674,
          'fields' => 1074264750,
          'flow_finish' => 582717,
          'engine_type' => 0
        };

Reply via email to