Re: [5.1] pflow(4) flow with starttime *after* endtime

2012-11-05 Thread Patrick Lamaiziere
Le Fri, 27 Jul 2012 11:13:21 +0200, Hrvoje Popovski a écrit : > On 26.7.2012. 18:31, Patrick Lamaiziere wrote: > > Hello, > > > > We have just noticed that pflow (v5) sometime (but often) uses a > > StartTime value which is later than the EndTime. > > So the duration is interpreted 4294966.29600

Re: [5.1] pflow(4) flow with starttime *after* endtime

2012-07-27 Thread Hrvoje Popovski
On 26.7.2012. 18:31, Patrick Lamaiziere wrote: > Hello, > > We have just noticed that pflow (v5) sometime (but often) uses a > StartTime value which is later than the EndTime. > So the duration is interpreted 4294966.29600 secondes. > This confuses our collector (nfsen). > > (wireshark) >

[5.1] pflow(4) flow with starttime *after* endtime

2012-07-26 Thread Patrick Lamaiziere
Hello, We have just noticed that pflow (v5) sometime (but often) uses a StartTime value which is later than the EndTime. So the duration is interpreted 4294966.29600 secondes. This confuses our collector (nfsen). (wireshark) pdu 19/30 SrcAddr: 194.57.169.116 (194.57.169.116)