Hi Joel,
Help with documentation would be indeed much appreciated (along
with tips, methodology, etc.). Maybe creating an account for you
on the wiki is a good first step? If it sounds a workable approach
we can follow-up privately to exchange login details.
(Needless to say invite to get an acco
Yes -- this is on Juniper IPFIX.
Elisa: I can try to capture an 'errant' flow packet.
Paolo: That seems like a good work around. Thanks.
I've fought a lot with the docs, maybe they don't match my learning style.
(would it be possible to try to add some internal linking/anchors in the
doc?)
A FA
Hi Joel,
On top of Elisa's answer, inline:
On Mon, Feb 24, 2014 at 07:30:38PM -0800, Joel Krauska wrote:
>
> Any way to override the flow timestamps with some actual time window data?
Yes, nfacctd_time_new set to true. Feel free to read docs and
give it a try. Unless: a) timers are set short (ie
Hi Joel,
Are you using Juniper by any chance? I am working on an issue with Juniper
IPFIX data, where the start time of the flows coming from the routers is
reported weeks in the past.
Is there any way you could capture the flow data to verify the timestamp in
there?
Best regards
Elisa
On Fe
I'm doing mysql rollups and seeing odd timestamps.
I'm seeing occasional stamp_inserted times in the past.
(some even as far back as several weeks)
This is using pmacct-1.5.0rc2
snippet of relevant config:
!# Tag Map to set agent_id
pre_tag_map: pretag.map
plugins: mysql[asn]
sql_optimize_cl
