Re: [Nfdump-discuss] Reported flow counts after performing aggregation
netflow collecting and processing tools
Brought to you by:
phaag
|
From: Peter H. <ph...@us...> - 2013-08-11 15:41:49
|
Hi Karen, Not sure what you mean. Can you make an example? Thanks - Peter On 19/7/13 11:38 PM, Karen McEachern wrote: > Hi Peter, > > > > After aggregating an nfcapd file with -A, it doesn't look like the > aggregated flows field of the flow records is being used when total number > of flows is reported (e.g. nfdump -I, summary line for -s), or when a Top N > ordered by number of flows is run. Is that intended? It looks like -A is > quite useful for reducing files sizes and speeding up analysis, so I was > hoping the aggregated flow field would be used so that results aren't > affected. > > > > Thanks, Karen > > > > ------------------------------------------------------------------------------ > See everything from the browser to the database with AppDynamics > Get end-to-end visibility with application monitoring from AppDynamics > Isolate bottlenecks and diagnose root cause in seconds. > Start your free trial of AppDynamics Pro today! > http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk > > > > _______________________________________________ > Nfdump-discuss mailing list > Nfd...@li... > https://lists.sourceforge.net/lists/listinfo/nfdump-discuss > -- Be nice to your netflow data. Use NfSen and nfdump :) |