|
From: Amir C. <ami...@ho...> - 2012-12-05 09:39:13
|
Hi guys, I'm new to NFSEN and have set it up over the last few days, so far i have been very impressed. I mainly use it for NSEL events from Cisco ASA devices, i have using nfsen-1.3.6p1 and nfdump-1.5.8-2-NSEL. The only issue i have is intepretting the graphs for the 'Flow' and 'Packet' detail. For example, If i take a single time window in NFSEN and check the FLOW graph it shows '110 m', if i look at a NFDUMP breakdown there is nothing that correlates to that figure: Summary: total flows: 65, total bytes: 8358, total packets: 65, avg bps: 307, avg pps: 0, avg bpp: 128 Time window: 2012-12-05 03:50:27 - 2012-12-05 03:54:04 Total flows processed: 65, Records skipped: 0, Bytes read: 7832 Sys: 0.000s flows/second: 0.0 Wall: 0.006s flows/second: 10633.1 Does someone know how these graph values match up ? The Byte count values seem to be accurate. Amir |