-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Hi Mark.
I observed the same issue with nprobe, however I discovered that nProbe
had run with a wrong template definition (missing flow start and flow
end). I just included the two definitions of them in the flow template
and everything worked fine
On 3/23/2011 6:49 AM, Peter Haag wrote:
> nfdump simply reports, what it finds in the flows. There is a bug in
> softflowd, if you read flows from a pcap file.
I've seen this in nprobe as well. Workaround is to set TZ to GMT in the
environment prior to starting the probe.
Mark
--
nfdump simply reports, what it finds in the flows. There is a bug in softflowd,
if you read flows from a pcap file.
- Peter
On 3/23/11 9:59, Matthias Teege wrote:
> Moin,
>
> I've collected some v9 flows with softflowd and nfdump 1.6.3p1. The raw
> output starts with:
>
> Flow Record
Moin,
I've collected some v9 flows with softflowd and nfdump 1.6.3p1. The raw
output starts with:
Flow Record:
Flags= 0x00 Unsampled
size =44
first=1296570675 [2011-02-01 15:31:15]
last =1300865642 [2011-03-23
