[Nfdump-discuss] Top N stats - Byte count sorted wrong?

[Tristan R. <Tri...@we...>]

I have just seen my first Top 10 statistics on our network.  Unless I am
reading this wrong, the second list "Top 10 flows byte count" should be
in descending order by byte count.  Why is it not this way?

Thanks,

Tristan

[trhodes@server trhodes]$ nfdump -R /var/netflow/router1 -S

Flows analysed: 7560300 matched: 7560300, Bytes read: 368942664
Aggregated flows 2905659
Time window: Time Window unknown
Top 10 flows packet count:
Date flow start        Len Proto    Src IP Addr:Port         Dst IP
Addr:Port  Packets    Bytes
Jul 01 2005 11:02:27 19255 TCP     x.x.x.x:9575  ->   x.x.x.x:524  
33382959   3.5 GB  10
Jul 01 2005 11:02:27 19255 TCP     x.x.x.x:524   ->    x.x.x.x:9575 
31972013   1.7 GB  10
Jul 01 2005 11:02:27 11813 TCP    x.x.x.x:2317  ->   x.x.x.x:1604 
20701707 878.5 MB   8
Jul 01 2005 11:02:27 19255 TCP   x.x.x.x:80    ->   x.x.x.x:1056 
9375917 741.4 MB  10
Jul 01 2005 11:02:27 11813 TCP    x.x.x.x:1604  ->   x.x.x.x:2317 
8611143 328.5 MB   8
Jul 01 2005 11:02:27 19255 TCP    x.x.x.x:1056  ->  x.x.x.x:80   
4919642 187.7 MB  10
Jul 01 2005 11:09:43 19351 TCP    x.x.x.x:524   ->   x.x.x.x:1063 
2231966 979.5 MB  72
Jul 01 2005 11:09:43 19351 TCP    x.x.x.x:1063  ->   x.x.x.x:524  
2073963 151.4 MB  72
Jul 01 2005 15:02:35  1213 TCP    x.x.x.x:1279  ->    x.x.x.x:2507 
1195007   1.7 GB   1
Jul 01 2005 11:07:38 18085 TCP     x.x.x.x:524   -> x.x.x.x:1041 
1083402 351.7 MB 883

Top 10 flows byte count:
Date flow start        Len Proto    Src IP Addr:Port         Dst IP
Addr:Port  Packets    Bytes
Jul 01 2005 11:02:27 19255 TCP   x.x.x.x:80    ->   x.x.x.x:1056 
9375917 741.4 MB  10
Jul 01 2005 11:02:27 11813 TCP    x.x.x.x:2317  ->   x.x.x.x:1604 
20701707 878.5 MB   8
Jul 01 2005 11:02:27 19255 TCP     x.x.x.x:9575  ->   x.x.x.x:524  
33382959   3.5 GB  10
Jul 01 2005 11:02:27 19255 TCP    x.x.x.x:524   ->    x.x.x.x9575 
31972013   1.7 GB  10
Jul 01 2005 15:02:35  1213 TCP    x.x.x.x:1279  ->    x.x.x.x:2507 
1195007   1.7 GB   1
Jul 01 2005 14:45:20   782 TCP    x.x.x.x:1274  ->    x.x.x.x:2504  
792102   1.1 GB   1
Jul 01 2005 11:09:43 19351 TCP    x.x.x.x:524   ->   x.x.x.x:1063 
2231966 979.5 MB  72
Jul 01 2005 11:07:40 11286 TCP     x.x.x.x:524   ->  x.x.x.x:1390  
695175 701.8 MB 502
Jul 01 2005 11:07:40 11286 TCP   x.x.x.x:1390  ->    x.x.x.x:524   
801235 647.7 MB 501
Jul 01 2005 11:16:30  4628 TCP    x.x.x.x:524   ->  x.x.x.x:1038  
355250 383.3 MB  45