Folks - Attached are three files - first the diff against top-of-trunk (well, I snapped it a few days ago, so i'm ass-u-me-ing no one else has modifed the file) for print-sflow.c which adds a first pass at printing host sflow PDUs. The second is a pcap file with 10 such PDUs and the third is an example of the output as it presently stands. As I'm not sure I am (or anyone else is) 100% happy with the format I'm not suggesting the output be checked-in at this time, the .pcap and .cooked files are simply for others' enjoyment and evaluation.
One thing I'm never really sure about is when to do everything on one line and when to split it up... happy benchmarking, rick jones
diff --git a/print-sflow.c b/print-sflow.c index f27370a..82c3706 100644 --- a/print-sflow.c +++ b/print-sflow.c @@ -61,6 +61,8 @@ static const char rcsid[] _U_ = * */ +#define IPV6_AGENT_OFFSET 12 + struct sflow_datagram_t { u_int8_t version[4]; u_int8_t ip_version[4]; @@ -213,6 +215,12 @@ struct sflow_expanded_counter_sample_t { #define SFLOW_COUNTER_BASEVG 4 #define SFLOW_COUNTER_VLAN 5 #define SFLOW_COUNTER_PROCESSOR 1001 +#define SFLOW_COUNTER_HOST_DESC 2000 +#define SFLOW_COUNTER_HOST_ADAPTORS 2001 +#define SFLOW_COUNTER_HOST_CPU 2003 +#define SFLOW_COUNTER_HOST_MEMORY 2004 +#define SFLOW_COUNTER_HOST_DISC 2005 +#define SFLOW_COUNTER_HOST_NET_IO 2006 static const struct tok sflow_counter_type_values[] = { { SFLOW_COUNTER_GENERIC, "Generic counter"}, @@ -221,6 +229,12 @@ static const struct tok sflow_counter_type_values[] = { { SFLOW_COUNTER_BASEVG, "100 BaseVG counter"}, { SFLOW_COUNTER_VLAN, "Vlan counter"}, { SFLOW_COUNTER_PROCESSOR, "Processor counter"}, + { SFLOW_COUNTER_HOST_DESC, "Host Description"}, + { SFLOW_COUNTER_HOST_ADAPTORS, "Host Adaptors"}, + { SFLOW_COUNTER_HOST_CPU, "Host CPU"}, + { SFLOW_COUNTER_HOST_MEMORY, "Host Memory"}, + { SFLOW_COUNTER_HOST_DISC, "Host Disc"}, + { SFLOW_COUNTER_HOST_NET_IO, "Host Network I/O"}, { 0, NULL} }; @@ -251,7 +265,7 @@ struct sflow_generic_counter_t { u_int8_t ifinbroadcastpkts[4]; u_int8_t ifindiscards[4]; u_int8_t ifinerrors[4]; - u_int8_t ifinunkownprotos[4]; + u_int8_t ifinunknownprotos[4]; u_int8_t ifoutoctets[8]; u_int8_t ifoutunicastpkts[4]; u_int8_t ifoutmulticastpkts[4]; @@ -303,6 +317,136 @@ struct sflow_vlan_counter_t { u_int8_t discards[4]; }; +#define SFLOW_OS_NAME_UNKNOWN 0 +#define SFLOW_OS_NAME_OTHER 1 +#define SFLOW_OS_NAME_LINUX 2 +#define SFLOW_OS_NAME_WINDOWS 3 +#define SFLOW_OS_NAME_DARWIN 4 +#define SFLOW_OS_NAME_HPUX 5 +#define SFLOW_OS_NAME_AIX 6 +#define SFLOW_OS_NAME_DRAGONFLY 7 +#define SFLOW_OS_NAME_FREEBSD 8 +#define SFLOW_OS_NAME_NETBSD 9 +#define SFLOW_OS_NAME_OPENBSD 10 +#define SFLOW_OS_NAME_OSF 11 +#define SFLOW_OS_NAME_SOLARIS 12 + +static const struct tok sflow_os_name_values[] = { + { SFLOW_OS_NAME_UNKNOWN, "Unknown"}, + { SFLOW_OS_NAME_OTHER, "Other"}, + { SFLOW_OS_NAME_LINUX, "Linux"}, + { SFLOW_OS_NAME_WINDOWS, "Windows"}, + { SFLOW_OS_NAME_DARWIN, "Darwin"}, + { SFLOW_OS_NAME_HPUX, "HP-UX"}, + { SFLOW_OS_NAME_AIX, "AIX"}, + { SFLOW_OS_NAME_DRAGONFLY, "DRAGONFLY"}, + { SFLOW_OS_NAME_FREEBSD, "FreeBSD"}, + { SFLOW_OS_NAME_NETBSD, "NetBSD"}, + { SFLOW_OS_NAME_OPENBSD, "OpenBSD"}, + { SFLOW_OS_NAME_OSF, "OSF"}, + { SFLOW_OS_NAME_SOLARIS, "Solaris"}, + { 0, NULL} +}; + + +#define SFLOW_MACH_TYPE_UNKNOWN 0 +#define SFLOW_MACH_TYPE_OTHER 1 +#define SFLOW_MACH_TYPE_X86 2 +#define SFLOW_MACH_TYPE_X86_64 3 +#define SFLOW_MACH_TYPE_IA64 4 +#define SFLOW_MACH_TYPE_SPARC 5 +#define SFLOW_MACH_TYPE_ALPHA 6 +#define SFLOW_MACH_TYPE_POWERPC 7 +#define SFLOW_MACH_TYPE_M68K 8 +#define SFLOW_MACH_TYPE_MIPS 9 +#define SFLOW_MACH_TYPE_ARM 10 +#define SFLOW_MACH_TYPE_HPPA 11 +#define SFLOW_MACH_TYPE_S390 12 + +static const struct tok sflow_mach_type_values[] = { + { SFLOW_MACH_TYPE_UNKNOWN , "Unknown"}, + { SFLOW_MACH_TYPE_OTHER , "Other"}, + { SFLOW_MACH_TYPE_X86 , "x86"}, + { SFLOW_MACH_TYPE_X86_64 , "x86_64"}, + { SFLOW_MACH_TYPE_IA64 , "ia64"}, + { SFLOW_MACH_TYPE_SPARC , "SPARC"}, + { SFLOW_MACH_TYPE_ALPHA , "Alpha"}, + { SFLOW_MACH_TYPE_POWERPC , "PowerPC"}, + { SFLOW_MACH_TYPE_M68K , "M68K"}, + { SFLOW_MACH_TYPE_MIPS , "MIPS"}, + { SFLOW_MACH_TYPE_ARM , "ARM"}, + { SFLOW_MACH_TYPE_HPPA , "PA-RISC"}, + { SFLOW_MACH_TYPE_S390 , "S390"}, + { 0, NULL} + +}; + +/* this looks a bit odd thanks to the embedded variable-length strings */ +struct sflow_host_desc_counter_t { + u_int8_t host_name_len[4]; + u_int8_t uuid[16]; + u_int8_t machine_type[4]; + u_int8_t os_type[4]; + u_int8_t os_rel_len[4]; +}; + +struct sflow_host_cpu_counter_t { + u_int8_t load_one[4]; + u_int8_t load_five[4]; + u_int8_t load_fifteen[4]; + u_int8_t proc_run[4]; + u_int8_t proc_total[4]; + u_int8_t cpu_num[4]; + u_int8_t cpu_speed[4]; + u_int8_t uptime[4]; + u_int8_t cpu_user[4]; + u_int8_t cpu_nice[4]; + u_int8_t cpu_system[4]; + u_int8_t cpu_idle[4]; + u_int8_t cpu_wio[4]; + u_int8_t cpu_intr[4]; + u_int8_t cpu_sintr[4]; + u_int8_t interrupts[4]; + u_int8_t contexts[4]; +}; + +struct sflow_host_memory_counter_t { + u_int8_t mem_total[8]; + u_int8_t mem_free[8]; + u_int8_t mem_shared[8]; + u_int8_t mem_buffers[8]; + u_int8_t mem_cached[8]; + u_int8_t swap_total[8]; + u_int8_t swap_free[8]; + u_int8_t page_in[4]; + u_int8_t page_out[4]; + u_int8_t swap_in[4]; + u_int8_t swap_out[4]; +}; + +struct sflow_host_disc_counter_t { + u_int8_t disc_total[8]; + u_int8_t disc_free[8]; + u_int8_t part_max_used[4]; + u_int8_t reads[4]; + u_int8_t bytes_read[8]; + u_int8_t read_time[4]; + u_int8_t writes[4]; + u_int8_t bytes_written[8]; + u_int8_t write_time[4]; +}; + +struct sflow_host_net_io_counter_t { + u_int8_t bytes_in[8]; + u_int8_t packets_in[4]; + u_int8_t errors_in[4]; + u_int8_t drops_in[4]; + u_int8_t bytes_out[8]; + u_int8_t packets_out[4]; + u_int8_t errors_out[4]; + u_int8_t drops_out[4]; +}; + static int print_sflow_counter_generic(const u_char *pointer, u_int len) { @@ -333,7 +477,7 @@ print_sflow_counter_generic(const u_char *pointer, u_int len) { EXTRACT_32BITS(sflow_gen_counter->ifindiscards)); printf("\n\t In errors %u, unknown protos %u", EXTRACT_32BITS(sflow_gen_counter->ifinerrors), - EXTRACT_32BITS(sflow_gen_counter->ifinunkownprotos)); + EXTRACT_32BITS(sflow_gen_counter->ifinunknownprotos)); printf("\n\t Out octets %" PRIu64 ", unicast pkts %u, multicast pkts %u, broadcast pkts %u, discards %u", EXTRACT_64BITS(sflow_gen_counter->ifoutoctets), @@ -468,6 +612,235 @@ print_sflow_counter_processor(const u_char *pointer, u_int len) { } static int +print_sflow_counter_host_desc(const u_char *pointer, int len) { + + const struct sflow_host_desc_counter_t *sflow_host_desc_counter; + int offset; + int name_len; + int full_size; + + + /* first sanity check, which will not include the strings + themselves but will include all the "fixed" contents. we will + do additional checks as the string lengths become known */ + full_size = sizeof(struct sflow_host_desc_counter_t); + if (len < full_size) + return 1; + + sflow_host_desc_counter = (const struct sflow_host_desc_counter_t *)pointer; + offset = 0; + + name_len = EXTRACT_32BITS(sflow_host_desc_counter->host_name_len); + /* everything is supposed to be padded to 4 byte boundaries so + figure the number of four byte quantities */ + offset += ((name_len + 3) / 4) * 4; + + full_size += offset; + + /* next sanity check */ + if (len < full_size) + return 1; + + /* why yes, this does look funny, it will make sense if you look + at sflow_host_desc_counter_t :) */ + printf("\n\t name %*s, ",name_len,sflow_host_desc_counter->uuid); + + + printf("uuid TBD, machine type %s, os %s, ", + tok2str(sflow_mach_type_values, "UNKNOWN", + EXTRACT_32BITS(sflow_host_desc_counter->machine_type + offset)), + tok2str(sflow_os_name_values, "UNKNOWN", + EXTRACT_32BITS(sflow_host_desc_counter->os_type + offset))); + + name_len = EXTRACT_32BITS(sflow_host_desc_counter->os_rel_len + offset); + + /* is there enough for the release name? */ + if (len < (full_size + name_len)) + return 1; + + printf("release %*s",name_len,sflow_host_desc_counter->os_rel_len + 4 + offset); + + return 0; + +} + +struct sflow_counter_host_adaptors_t { + u_int8_t num_adaptors[4]; +}; + +struct sflow_counter_host_adaptor_t { + u_int8_t ifindex[4]; + u_int8_t num_macs[4]; +}; + +static int +print_sflow_counter_host_adaptors(const u_char *pointer, int len) { + + int num_adaptors, num_macs; + const u_char *tptr; + const struct sflow_counter_host_adaptor_t *host_adaptor; + int tlen, i, j, m; + + tlen = len; + + /* first get the number of adaptors */ + if (len < sizeof(struct sflow_counter_host_adaptors_t)) + return 1; + + tptr = pointer; + num_adaptors = EXTRACT_32BITS(tptr); + + tptr += sizeof(struct sflow_counter_host_adaptors_t); + tlen -= sizeof(struct sflow_counter_host_adaptors_t); + + printf("\n\t num_adaptors %u",num_adaptors); + for (i = 0; i < num_adaptors; i++) { + if (tlen < sizeof(struct sflow_counter_host_adaptor_t)) + return 1; + + host_adaptor = (const struct sflow_counter_host_adaptor_t *)tptr; + num_macs = EXTRACT_32BITS(host_adaptor->num_macs); + printf("\n\t ifindex %u mac%s ", + EXTRACT_32BITS(host_adaptor->ifindex), + (num_macs > 1) ? "s" : ""); + tptr += sizeof(struct sflow_counter_host_adaptor_t); + tlen -= sizeof(struct sflow_counter_host_adaptor_t); + for (j = 0; j < num_macs; j++) { + /* yes, 8 - they are supposed to be padded out to a four + byte boundary */ + if (tlen < 8) + return 1; + printf("%s %s", + (j > 0) ? "," : "", + etheraddr_string(tptr)); + tlen -= 8; + tptr += 8; + } + } + + return 0; +} + + +static int +print_sflow_counter_host_cpu(const u_char *pointer, int len) { + + const struct sflow_host_cpu_counter_t *sflow_host_cpu_counter; + + float lav1,lav5,lav15; + int temp; + + if (len < sizeof(struct sflow_host_cpu_counter_t)) + return 1; + + sflow_host_cpu_counter = (const struct sflow_host_cpu_counter_t *)pointer; + + temp = EXTRACT_32BITS(sflow_host_cpu_counter->load_one); + memcpy(&temp,&lav1,4); + + temp = EXTRACT_32BITS(sflow_host_cpu_counter->load_five); + memcpy(&temp,&lav5,4); + + temp = EXTRACT_32BITS(sflow_host_cpu_counter->load_fifteen); + memcpy(&temp,&lav15,4); + + printf("\n\t lavg 1m %f, lavg 5m %f, lavg 15m %f, running processes %u, total processes %u, num cpus %u, cpu MHz %u, uptime secs %u, user cpu ms %u nice cpu ms %u, sys cpu ms %u, idle cpu ms %u, wio cpu ms %u, intr cpu ms %u, sintr cpu ms %u, interrupts %u, context switches %u", + lav1, + lav5, + lav15, + EXTRACT_32BITS(sflow_host_cpu_counter->proc_run), + EXTRACT_32BITS(sflow_host_cpu_counter->proc_total), + EXTRACT_32BITS(sflow_host_cpu_counter->cpu_num), + EXTRACT_32BITS(sflow_host_cpu_counter->cpu_speed), + EXTRACT_32BITS(sflow_host_cpu_counter->uptime), + EXTRACT_32BITS(sflow_host_cpu_counter->cpu_user), + EXTRACT_32BITS(sflow_host_cpu_counter->cpu_nice), + EXTRACT_32BITS(sflow_host_cpu_counter->cpu_system), + EXTRACT_32BITS(sflow_host_cpu_counter->cpu_idle), + EXTRACT_32BITS(sflow_host_cpu_counter->cpu_wio), + EXTRACT_32BITS(sflow_host_cpu_counter->cpu_intr), + EXTRACT_32BITS(sflow_host_cpu_counter->cpu_sintr), + EXTRACT_32BITS(sflow_host_cpu_counter->interrupts), + EXTRACT_32BITS(sflow_host_cpu_counter->contexts)); + + return 0; +} + +static int +print_sflow_counter_host_memory(const u_char *pointer, int len) { + + const struct sflow_host_memory_counter_t *sflow_host_memory_counter; + + if (len < sizeof(struct sflow_host_memory_counter_t)) + return 1; + + sflow_host_memory_counter = (const struct sflow_host_memory_counter_t *)pointer; + printf("\n\t mem tot %"PRIu64", mem free %"PRIu64", mem shared %"PRIu64", mem buffers %"PRIu64", mem cache %"PRIu64", swap total %"PRIu64", swap free %"PRIu64", page in %u, page out %u, swap in %u, swap out %u", + EXTRACT_64BITS(sflow_host_memory_counter->mem_total), + EXTRACT_64BITS(sflow_host_memory_counter->mem_free), + EXTRACT_64BITS(sflow_host_memory_counter->mem_shared), + EXTRACT_64BITS(sflow_host_memory_counter->mem_buffers), + EXTRACT_64BITS(sflow_host_memory_counter->mem_cached), + EXTRACT_64BITS(sflow_host_memory_counter->swap_total), + EXTRACT_64BITS(sflow_host_memory_counter->swap_free), + EXTRACT_32BITS(sflow_host_memory_counter->page_in), + EXTRACT_32BITS(sflow_host_memory_counter->page_out), + EXTRACT_32BITS(sflow_host_memory_counter->swap_in), + EXTRACT_32BITS(sflow_host_memory_counter->swap_out)); + + return 0; + +} + +static int +print_sflow_counter_host_disc(const u_char *pointer, int len) { + + const struct sflow_host_disc_counter_t *sflow_host_disc_counter; + + if (len < sizeof(struct sflow_host_disc_counter_t)) + return 1; + + sflow_host_disc_counter = (const struct sflow_host_disc_counter_t *)pointer; + + printf("\n\t total disc %"PRIu64", free disc %"PRIu64", max part pct used %.2f, reads %u, read bytes %"PRIu64", read ms %u, writes %u, write bytes %"PRIu64", write ms %u", + EXTRACT_64BITS(sflow_host_disc_counter->disc_total), + EXTRACT_64BITS(sflow_host_disc_counter->disc_free), + (float) EXTRACT_32BITS(sflow_host_disc_counter->part_max_used) / 100.0, + EXTRACT_32BITS(sflow_host_disc_counter->reads), + EXTRACT_64BITS(sflow_host_disc_counter->bytes_read), + EXTRACT_32BITS(sflow_host_disc_counter->read_time), + EXTRACT_32BITS(sflow_host_disc_counter->writes), + EXTRACT_64BITS(sflow_host_disc_counter->bytes_written), + EXTRACT_32BITS(sflow_host_disc_counter->write_time)); + + return 0; + +} + +static int +print_sflow_counter_host_net_io(const u_char *pointer, int len) { + + const struct sflow_host_net_io_counter_t *sflow_host_net_io_counter; + + if (len < sizeof(struct sflow_host_net_io_counter_t)) + return 1; + + sflow_host_net_io_counter = (const struct sflow_host_net_io_counter_t *)pointer; + + printf("\n\t bytes in %"PRIu64", pkts in %u, err in %u, drop in %u, bytes out %"PRIu64", pkts out %u, err out %u, drop out %u", + EXTRACT_64BITS(sflow_host_net_io_counter->bytes_in), + EXTRACT_32BITS(sflow_host_net_io_counter->packets_in), + EXTRACT_32BITS(sflow_host_net_io_counter->errors_in), + EXTRACT_32BITS(sflow_host_net_io_counter->drops_in), + EXTRACT_64BITS(sflow_host_net_io_counter->bytes_out), + EXTRACT_32BITS(sflow_host_net_io_counter->packets_out), + EXTRACT_32BITS(sflow_host_net_io_counter->errors_out), + EXTRACT_32BITS(sflow_host_net_io_counter->drops_out)); + + return 0; +} + +static int sflow_print_counter_records(const u_char *pointer, u_int len, u_int records) { u_int nrecords; @@ -529,6 +902,30 @@ sflow_print_counter_records(const u_char *pointer, u_int len, u_int records) { if (print_sflow_counter_processor(tptr,tlen)) return 1; break; + case SFLOW_COUNTER_HOST_DESC: + if (print_sflow_counter_host_desc(tptr,tlen)) + return 1; + break; + case SFLOW_COUNTER_HOST_ADAPTORS: + if (print_sflow_counter_host_adaptors(tptr,tlen)) + return 1; + break; + case SFLOW_COUNTER_HOST_CPU: + if (print_sflow_counter_host_cpu(tptr,tlen)) + return 1; + break; + case SFLOW_COUNTER_HOST_MEMORY: + if (print_sflow_counter_host_memory(tptr,tlen)) + return 1; + break; + case SFLOW_COUNTER_HOST_DISC: + if (print_sflow_counter_host_disc(tptr,tlen)) + return 1; + break; + case SFLOW_COUNTER_HOST_NET_IO: + if (print_sflow_counter_host_net_io(tptr,tlen)) + return 1; + break; default: if (vflag <= 1) print_unknown_data(tptr, "\n\t\t", counter_len); @@ -819,7 +1216,7 @@ sflow_print(const u_char *pptr, u_int len) { u_int tlen; u_int32_t sflow_sample_type, sflow_sample_len; u_int32_t nsamples; - + u_int32_t v6_offset; tptr = pptr; tlen = len; @@ -846,6 +1243,7 @@ sflow_print(const u_char *pptr, u_int len) { } /* ok they seem to want to know everything - lets fully decode it */ + nsamples=EXTRACT_32BITS(sflow_datagram->samples); printf("sFlowv%u, %s agent %s, agent-id %u, seqnum %u, uptime %u, samples %u, length %u", EXTRACT_32BITS(sflow_datagram->version),
11:53:53.072552 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 516) z400.56070 > z400.sflow: sFlowv5, IPv4 agent tardy, agent-id 100, seqnum 9327, uptime 93270000, samples 1, length 488 counter sample (2), length 452, seqnum 9327, type 2, idx 1, records 6 enterprise 0, Host Adaptors (2001) length 100 num_adaptors 6 ifindex 2 mac 64:31:50:1e:9e:76 (oui Unknown) ifindex 3 mac 00:1c:c4:47:d3:f9 (oui Unknown) ifindex 4 mac 00:1c:c4:47:d3:f8 (oui Unknown) ifindex 5 mac 00:1c:c4:47:d3:fb (oui Unknown) ifindex 6 mac 00:1c:c4:47:d3:fa (oui Unknown) ifindex 8 mac 00:00:00:00:00:00 (oui Ethernet) enterprise 0, Host Disc (2005) length 52 total disc 1932652552192, free disc 1686791454720, max part pct used 12.72, reads 247619, read bytes 4037195776, read ms 1140000, writes 14361164, write bytes 327179051008, write ms 839823550 enterprise 0, Host Memory (2004) length 72 mem tot 12608434176, mem free 10248421376, mem shared 0, mem buffers 148303872, mem cache 592838656, swap total 36936085504, swap free 36929425408, page in 1974761, page out 159755396, swap in 216, swap out 1666 enterprise 0, Host CPU (2003) length 68 lavg 1m 0.000000, lavg 5m 0.000000, lavg 15m 0.000000, running processes 1, total processes 371, num cpus 4, cpu MHz 1596, uptime secs 1793001, user cpu ms 41647440 nice cpu ms 531970, sys cpu ms 59400520, idle cpu ms 2739043694, wio cpu ms 18748400, intr cpu ms 106240, sintr cpu ms 90672500, interrupts 3561912041, context switches 1524935293 enterprise 0, Host Network I/O (2006) length 40 bytes in 124267232, pkts in 762529, err in 0, drop in 0, bytes out 24696606, pkts out 188286, err out 0, drop out 0 enterprise 0, Host Description (2000) length 60 name tardy, uuid TBD, machine type x86_64, os Linux, release 2.6.35-28-generic 11:54:03.092450 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 516) z400.56070 > z400.sflow: sFlowv5, IPv4 agent tardy, agent-id 100, seqnum 9328, uptime 93280000, samples 1, length 488 counter sample (2), length 452, seqnum 9328, type 2, idx 1, records 6 enterprise 0, Host Adaptors (2001) length 100 num_adaptors 6 ifindex 2 mac 64:31:50:1e:9e:76 (oui Unknown) ifindex 3 mac 00:1c:c4:47:d3:f9 (oui Unknown) ifindex 4 mac 00:1c:c4:47:d3:f8 (oui Unknown) ifindex 5 mac 00:1c:c4:47:d3:fb (oui Unknown) ifindex 6 mac 00:1c:c4:47:d3:fa (oui Unknown) ifindex 8 mac 00:00:00:00:00:00 (oui Ethernet) enterprise 0, Host Disc (2005) length 52 total disc 1932652552192, free disc 1686791438336, max part pct used 12.72, reads 247619, read bytes 4037195776, read ms 1140000, writes 14361207, write bytes 327179657216, write ms 839824260 enterprise 0, Host Memory (2004) length 72 mem tot 12608434176, mem free 10239459328, mem shared 0, mem buffers 148307968, mem cache 592850944, swap total 36936085504, swap free 36929425408, page in 1974761, page out 159755692, swap in 216, swap out 1666 enterprise 0, Host CPU (2003) length 68 lavg 1m 0.000000, lavg 5m 0.000000, lavg 15m 0.000000, running processes 1, total processes 380, num cpus 4, cpu MHz 1596, uptime secs 1793011, user cpu ms 41647720 nice cpu ms 531970, sys cpu ms 59400660, idle cpu ms 2739083044, wio cpu ms 18748650, intr cpu ms 106240, sintr cpu ms 90672500, interrupts 3561914009, context switches 1524939490 enterprise 0, Host Network I/O (2006) length 40 bytes in 124288250, pkts in 762636, err in 0, drop in 0, bytes out 24700774, pkts out 188319, err out 0, drop out 0 enterprise 0, Host Description (2000) length 60 name tardy, uuid TBD, machine type x86_64, os Linux, release 2.6.35-28-generic 11:54:13.112489 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 516) z400.56070 > z400.sflow: sFlowv5, IPv4 agent tardy, agent-id 100, seqnum 9329, uptime 93290000, samples 1, length 488 counter sample (2), length 452, seqnum 9329, type 2, idx 1, records 6 enterprise 0, Host Adaptors (2001) length 100 num_adaptors 6 ifindex 2 mac 64:31:50:1e:9e:76 (oui Unknown) ifindex 3 mac 00:1c:c4:47:d3:f9 (oui Unknown) ifindex 4 mac 00:1c:c4:47:d3:f8 (oui Unknown) ifindex 5 mac 00:1c:c4:47:d3:fb (oui Unknown) ifindex 6 mac 00:1c:c4:47:d3:fa (oui Unknown) ifindex 8 mac 00:00:00:00:00:00 (oui Ethernet) enterprise 0, Host Disc (2005) length 52 total disc 1932652552192, free disc 1686791438336, max part pct used 12.72, reads 247619, read bytes 4037195776, read ms 1140000, writes 14361227, write bytes 327179952128, write ms 839824480 enterprise 0, Host Memory (2004) length 72 mem tot 12608434176, mem free 10239459328, mem shared 0, mem buffers 148307968, mem cache 592855040, swap total 36936085504, swap free 36929425408, page in 1974761, page out 159755836, swap in 216, swap out 1666 enterprise 0, Host CPU (2003) length 68 lavg 1m 0.000000, lavg 5m 0.000000, lavg 15m 0.000000, running processes 1, total processes 380, num cpus 4, cpu MHz 1596, uptime secs 1793021, user cpu ms 41647750 nice cpu ms 531970, sys cpu ms 59400810, idle cpu ms 2739122764, wio cpu ms 18748750, intr cpu ms 106240, sintr cpu ms 90672500, interrupts 3561915309, context switches 1524942662 enterprise 0, Host Network I/O (2006) length 40 bytes in 124297569, pkts in 762739, err in 0, drop in 0, bytes out 24703050, pkts out 188337, err out 0, drop out 0 enterprise 0, Host Description (2000) length 60 name tardy, uuid TBD, machine type x86_64, os Linux, release 2.6.35-28-generic 11:54:23.132274 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 516) z400.56070 > z400.sflow: sFlowv5, IPv4 agent tardy, agent-id 100, seqnum 9330, uptime 93300000, samples 1, length 488 counter sample (2), length 452, seqnum 9330, type 2, idx 1, records 6 enterprise 0, Host Adaptors (2001) length 100 num_adaptors 6 ifindex 2 mac 64:31:50:1e:9e:76 (oui Unknown) ifindex 3 mac 00:1c:c4:47:d3:f9 (oui Unknown) ifindex 4 mac 00:1c:c4:47:d3:f8 (oui Unknown) ifindex 5 mac 00:1c:c4:47:d3:fb (oui Unknown) ifindex 6 mac 00:1c:c4:47:d3:fa (oui Unknown) ifindex 8 mac 00:00:00:00:00:00 (oui Ethernet) enterprise 0, Host Disc (2005) length 52 total disc 1932652552192, free disc 1686791442432, max part pct used 12.72, reads 247619, read bytes 4037195776, read ms 1140000, writes 14361237, write bytes 327180025856, write ms 839824560 enterprise 0, Host Memory (2004) length 72 mem tot 12608434176, mem free 10239475712, mem shared 0, mem buffers 148307968, mem cache 592855040, swap total 36936085504, swap free 36929425408, page in 1974761, page out 159755872, swap in 216, swap out 1666 enterprise 0, Host CPU (2003) length 68 lavg 1m 0.000000, lavg 5m 0.000000, lavg 15m 0.000000, running processes 1, total processes 378, num cpus 4, cpu MHz 1596, uptime secs 1793031, user cpu ms 41647780 nice cpu ms 531970, sys cpu ms 59400980, idle cpu ms 2739162574, wio cpu ms 18748770, intr cpu ms 106240, sintr cpu ms 90672500, interrupts 3561916540, context switches 1524945303 enterprise 0, Host Network I/O (2006) length 40 bytes in 124307798, pkts in 762860, err in 0, drop in 0, bytes out 24704460, pkts out 188346, err out 0, drop out 0 enterprise 0, Host Description (2000) length 60 name tardy, uuid TBD, machine type x86_64, os Linux, release 2.6.35-28-generic 11:54:33.152087 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 516) z400.56070 > z400.sflow: sFlowv5, IPv4 agent tardy, agent-id 100, seqnum 9331, uptime 93310000, samples 1, length 488 counter sample (2), length 452, seqnum 9331, type 2, idx 1, records 6 enterprise 0, Host Adaptors (2001) length 100 num_adaptors 6 ifindex 2 mac 64:31:50:1e:9e:76 (oui Unknown) ifindex 3 mac 00:1c:c4:47:d3:f9 (oui Unknown) ifindex 4 mac 00:1c:c4:47:d3:f8 (oui Unknown) ifindex 5 mac 00:1c:c4:47:d3:fb (oui Unknown) ifindex 6 mac 00:1c:c4:47:d3:fa (oui Unknown) ifindex 8 mac 00:00:00:00:00:00 (oui Ethernet) enterprise 0, Host Disc (2005) length 52 total disc 1932652552192, free disc 1686791442432, max part pct used 12.72, reads 247619, read bytes 4037195776, read ms 1140000, writes 14361317, write bytes 327180427264, write ms 839824660 enterprise 0, Host Memory (2004) length 72 mem tot 12608434176, mem free 10239475712, mem shared 0, mem buffers 148307968, mem cache 592855040, swap total 36936085504, swap free 36929425408, page in 1974761, page out 159756068, swap in 216, swap out 1666 enterprise 0, Host CPU (2003) length 68 lavg 1m 0.000000, lavg 5m 0.000000, lavg 15m 0.000000, running processes 1, total processes 378, num cpus 4, cpu MHz 1596, uptime secs 1793041, user cpu ms 41647790 nice cpu ms 531970, sys cpu ms 59401130, idle cpu ms 2739202514, wio cpu ms 18748820, intr cpu ms 106240, sintr cpu ms 90672500, interrupts 3561917740, context switches 1524947917 enterprise 0, Host Network I/O (2006) length 40 bytes in 124315347, pkts in 762953, err in 0, drop in 0, bytes out 24705644, pkts out 188354, err out 0, drop out 0 enterprise 0, Host Description (2000) length 60 name tardy, uuid TBD, machine type x86_64, os Linux, release 2.6.35-28-generic 11:54:43.171976 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 516) z400.56070 > z400.sflow: sFlowv5, IPv4 agent tardy, agent-id 100, seqnum 9332, uptime 93320000, samples 1, length 488 counter sample (2), length 452, seqnum 9332, type 2, idx 1, records 6 enterprise 0, Host Adaptors (2001) length 100 num_adaptors 6 ifindex 2 mac 64:31:50:1e:9e:76 (oui Unknown) ifindex 3 mac 00:1c:c4:47:d3:f9 (oui Unknown) ifindex 4 mac 00:1c:c4:47:d3:f8 (oui Unknown) ifindex 5 mac 00:1c:c4:47:d3:fb (oui Unknown) ifindex 6 mac 00:1c:c4:47:d3:fa (oui Unknown) ifindex 8 mac 00:00:00:00:00:00 (oui Ethernet) enterprise 0, Host Disc (2005) length 52 total disc 1932652552192, free disc 1686791471104, max part pct used 12.72, reads 247619, read bytes 4037195776, read ms 1140000, writes 14361329, write bytes 327180558336, write ms 839824740 enterprise 0, Host Memory (2004) length 72 mem tot 12608434176, mem free 10239602688, mem shared 0, mem buffers 148312064, mem cache 592814080, swap total 36936085504, swap free 36929425408, page in 1974761, page out 159756132, swap in 216, swap out 1666 enterprise 0, Host CPU (2003) length 68 lavg 1m 0.000000, lavg 5m 0.000000, lavg 15m 0.000000, running processes 1, total processes 378, num cpus 4, cpu MHz 1596, uptime secs 1793051, user cpu ms 41647840 nice cpu ms 531970, sys cpu ms 59401280, idle cpu ms 2739242664, wio cpu ms 18748850, intr cpu ms 106240, sintr cpu ms 90672500, interrupts 3561918936, context switches 1524950951 enterprise 0, Host Network I/O (2006) length 40 bytes in 124324620, pkts in 763059, err in 0, drop in 0, bytes out 24707956, pkts out 188370, err out 0, drop out 0 enterprise 0, Host Description (2000) length 60 name tardy, uuid TBD, machine type x86_64, os Linux, release 2.6.35-28-generic 11:54:53.191477 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 516) z400.56070 > z400.sflow: sFlowv5, IPv4 agent tardy, agent-id 100, seqnum 9333, uptime 93330000, samples 1, length 488 counter sample (2), length 452, seqnum 9333, type 2, idx 1, records 6 enterprise 0, Host Adaptors (2001) length 100 num_adaptors 6 ifindex 2 mac 64:31:50:1e:9e:76 (oui Unknown) ifindex 3 mac 00:1c:c4:47:d3:f9 (oui Unknown) ifindex 4 mac 00:1c:c4:47:d3:f8 (oui Unknown) ifindex 5 mac 00:1c:c4:47:d3:fb (oui Unknown) ifindex 6 mac 00:1c:c4:47:d3:fa (oui Unknown) ifindex 8 mac 00:00:00:00:00:00 (oui Ethernet) enterprise 0, Host Disc (2005) length 52 total disc 1932652552192, free disc 1686791471104, max part pct used 12.72, reads 247619, read bytes 4037195776, read ms 1140000, writes 14361333, write bytes 327180591104, write ms 839824760 enterprise 0, Host Memory (2004) length 72 mem tot 12608434176, mem free 10239602688, mem shared 0, mem buffers 148316160, mem cache 592814080, swap total 36936085504, swap free 36929425408, page in 1974761, page out 159756148, swap in 216, swap out 1666 enterprise 0, Host CPU (2003) length 68 lavg 1m 0.000000, lavg 5m 0.000000, lavg 15m 0.000000, running processes 1, total processes 378, num cpus 4, cpu MHz 1596, uptime secs 1793061, user cpu ms 41648230 nice cpu ms 531970, sys cpu ms 59401560, idle cpu ms 2739282224, wio cpu ms 18748860, intr cpu ms 106240, sintr cpu ms 90672500, interrupts 3561920935, context switches 1524957575 enterprise 0, Host Network I/O (2006) length 40 bytes in 124334867, pkts in 763183, err in 0, drop in 0, bytes out 24709524, pkts out 188381, err out 0, drop out 0 enterprise 0, Host Description (2000) length 60 name tardy, uuid TBD, machine type x86_64, os Linux, release 2.6.35-28-generic 11:55:03.009650 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 516) z400.56070 > z400.sflow: sFlowv5, IPv4 agent tardy, agent-id 100, seqnum 9334, uptime 93340000, samples 1, length 488 counter sample (2), length 452, seqnum 9334, type 2, idx 1, records 6 enterprise 0, Host Adaptors (2001) length 100 num_adaptors 6 ifindex 2 mac 64:31:50:1e:9e:76 (oui Unknown) ifindex 3 mac 00:1c:c4:47:d3:f9 (oui Unknown) ifindex 4 mac 00:1c:c4:47:d3:f8 (oui Unknown) ifindex 5 mac 00:1c:c4:47:d3:fb (oui Unknown) ifindex 6 mac 00:1c:c4:47:d3:fa (oui Unknown) ifindex 8 mac 00:00:00:00:00:00 (oui Ethernet) enterprise 0, Host Disc (2005) length 52 total disc 1932652552192, free disc 1686791467008, max part pct used 12.72, reads 247619, read bytes 4037195776, read ms 1140000, writes 14361355, write bytes 327180705792, write ms 839824780 enterprise 0, Host Memory (2004) length 72 mem tot 12608434176, mem free 10239299584, mem shared 0, mem buffers 148316160, mem cache 592818176, swap total 36936085504, swap free 36929425408, page in 1974761, page out 159756204, swap in 216, swap out 1666 enterprise 0, Host CPU (2003) length 68 lavg 1m 0.000000, lavg 5m 0.000000, lavg 15m 0.000000, running processes 1, total processes 380, num cpus 4, cpu MHz 1596, uptime secs 1793071, user cpu ms 41649570 nice cpu ms 531970, sys cpu ms 59401870, idle cpu ms 2739319974, wio cpu ms 18748870, intr cpu ms 106240, sintr cpu ms 90672500, interrupts 3561924223, context switches 1524973073 enterprise 0, Host Network I/O (2006) length 40 bytes in 124352789, pkts in 763357, err in 0, drop in 0, bytes out 24712559, pkts out 188403, err out 0, drop out 0 enterprise 0, Host Description (2000) length 60 name tardy, uuid TBD, machine type x86_64, os Linux, release 2.6.35-28-generic 11:55:13.027288 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 516) z400.56070 > z400.sflow: sFlowv5, IPv4 agent tardy, agent-id 100, seqnum 9335, uptime 93350000, samples 1, length 488 counter sample (2), length 452, seqnum 9335, type 2, idx 1, records 6 enterprise 0, Host Adaptors (2001) length 100 num_adaptors 6 ifindex 2 mac 64:31:50:1e:9e:76 (oui Unknown) ifindex 3 mac 00:1c:c4:47:d3:f9 (oui Unknown) ifindex 4 mac 00:1c:c4:47:d3:f8 (oui Unknown) ifindex 5 mac 00:1c:c4:47:d3:fb (oui Unknown) ifindex 6 mac 00:1c:c4:47:d3:fa (oui Unknown) ifindex 8 mac 00:00:00:00:00:00 (oui Ethernet) enterprise 0, Host Disc (2005) length 52 total disc 1932652552192, free disc 1686791467008, max part pct used 12.72, reads 247627, read bytes 4037466112, read ms 1140080, writes 14361373, write bytes 327181033472, write ms 839824980 enterprise 0, Host Memory (2004) length 72 mem tot 12608434176, mem free 10239340544, mem shared 0, mem buffers 148443136, mem cache 592830464, swap total 36936085504, swap free 36929425408, page in 1974893, page out 159756364, swap in 216, swap out 1666 enterprise 0, Host CPU (2003) length 68 lavg 1m 0.000000, lavg 5m 0.000000, lavg 15m 0.000000, running processes 1, total processes 379, num cpus 4, cpu MHz 1596, uptime secs 1793081, user cpu ms 41650450 nice cpu ms 531970, sys cpu ms 59402110, idle cpu ms 2739359174, wio cpu ms 18749000, intr cpu ms 106240, sintr cpu ms 90672500, interrupts 3561926907, context switches 1524982778 enterprise 0, Host Network I/O (2006) length 40 bytes in 124363027, pkts in 763473, err in 0, drop in 0, bytes out 24714323, pkts out 188417, err out 0, drop out 0 enterprise 0, Host Description (2000) length 60 name tardy, uuid TBD, machine type x86_64, os Linux, release 2.6.35-28-generic 11:55:23.046366 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 516) z400.56070 > z400.sflow: sFlowv5, IPv4 agent tardy, agent-id 100, seqnum 9336, uptime 93360000, samples 1, length 488 counter sample (2), length 452, seqnum 9336, type 2, idx 1, records 6 enterprise 0, Host Adaptors (2001) length 100 num_adaptors 6 ifindex 2 mac 64:31:50:1e:9e:76 (oui Unknown) ifindex 3 mac 00:1c:c4:47:d3:f9 (oui Unknown) ifindex 4 mac 00:1c:c4:47:d3:f8 (oui Unknown) ifindex 5 mac 00:1c:c4:47:d3:fb (oui Unknown) ifindex 6 mac 00:1c:c4:47:d3:fa (oui Unknown) ifindex 8 mac 00:00:00:00:00:00 (oui Ethernet) enterprise 0, Host Disc (2005) length 52 total disc 1932652552192, free disc 1686791462912, max part pct used 12.72, reads 247641, read bytes 4037793792, read ms 1140340, writes 14361384, write bytes 327181172736, write ms 839825140 enterprise 0, Host Memory (2004) length 72 mem tot 12608434176, mem free 10239213568, mem shared 0, mem buffers 148443136, mem cache 593006592, swap total 36936085504, swap free 36929425408, page in 1975053, page out 159756432, swap in 216, swap out 1666 enterprise 0, Host CPU (2003) length 68 lavg 1m 0.000000, lavg 5m 0.000000, lavg 15m 0.000000, running processes 1, total processes 379, num cpus 4, cpu MHz 1596, uptime secs 1793091, user cpu ms 41651310 nice cpu ms 531970, sys cpu ms 59402380, idle cpu ms 2739397834, wio cpu ms 18749090, intr cpu ms 106240, sintr cpu ms 90672500, interrupts 3561929892, context switches 1524995223 enterprise 0, Host Network I/O (2006) length 40 bytes in 124373999, pkts in 763606, err in 0, drop in 0, bytes out 24715781, pkts out 188426, err out 0, drop out 0 enterprise 0, Host Description (2000) length 60 name tardy, uuid TBD, machine type x86_64, os Linux, release 2.6.35-28-generic
- This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.