Re: [Nfdump-discuss] Bug with AS output in conjunction with -a

[Peter H. <ha...@sw...>]

-----BEGIN PGP SIGNED MESSAGE-----

Hallo Jens,
Indeed, this is bug. I'll fix that.

    - Peter

- --On February 14, 2006 1:11:59 +0100 Jens Schulze <sha...@sh...> wrote:

|
| Hello Peter,
|
| this night I found a possible bug when using the following programm
| calls:
|
| $ nfdump -r nfcapd.200602092055 -a -o pipe > xmyapipe.txt
| gives the first two lines:
| 2|1139514964|759|1139514966|167|6|0|0|0|1418523722|4425|0|0|0|3245222725|80|33016|46924|11|0|27|0|17|1394
| 2|1139514964|759|1139514966|167|6|0|0|0|3245222725|80|0|0|0|1418523722|4425|33016|46924|11|0|27|0|21|24460
|
| $ nfdump -r nfcapd.200602092055 -o pipe > xmypipe.txt
| gives the first two lines:
| 2|1139514964|759|1139514966|167|6|0|0|0|1418523722|4425|0|0|0|3245222725|80|3320|0|12|13|27|0|17|1394
| 2|1139514964|759|1139514966|167|6|0|0|0|3245222725|80|0|0|0|1418523722|4425|0|3320|13|12|27|0|21|24460
|
| Please see at the AS information in the first example, it seems that
| when aggravating the data, the source/destination AS information and
| input/output interface information will become invalid. Is this correct
| behaviour?
|
| Kind regards,
| Jens
|
| --
| This mail was scanned by AntiVir Milter.
| This product is licensed for non-commercial use.
| See www.antivir.de for details.
|
|
| -------------------------------------------------------
| This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
| for problems?  Stop!  Download the new AJAX search engine that makes
| searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
| http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
| _______________________________________________
| Nfdump-discuss mailing list
| Nfd...@li...
| https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
|



- --
_______ SWITCH - The Swiss Education and Research Network ______
Peter Haag,  Security Engineer,  Member of SWITCH CERT
PGP fingerprint: D9 31 D5 83 03 95 68 BA  FB 84 CA 94 AB FC 5D D7
SWITCH,  Limmatquai 138,  CH-8001 Zurich,  Switzerland
E-mail: pet...@sw... Web: http://www.switch.ch/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)

iQCVAwUBQ/GkQ/5AbZRALNr/AQHFdwP+IFS1Tv8kOuDXDUGt8z7O0Mu25B2ePDjK
GWtynEkX9muctga48M9NIjMpelh/KAth5GyFraoP+8pnnSpJYw/rGDDZpPntLucq
V2qeDZdxBx6y39XwpVANexynNf3jPf+8mOY9rHkESiNve+C5K3/JFNWuvZ5Y5O0P
XF3xLI4Y/Pg=
=Ge/t
-----END PGP SIGNATURE-----

--
_______ SWITCH - The Swiss Education and Research Network ______
Peter Haag,  Security Engineer,  Member of SWITCH CERT
PGP fingerprint: D9 31 D5 83 03 95 68 BA  FB 84 CA 94 AB FC 5D D7
SWITCH,  Limmatquai 138,  CH-8001 Zurich,  Switzerland
E-mail: pet...@sw... Web: http://www.switch.ch/