Re: [Flow-tools] gcc doesn't magically find include files

t; Warning: -L../../lib changed to > -L/usr/local/flow-tools/bin/Cflow-1.053/../../lib i'm not sure what kind of build environment you're trying to pull off, but it isn't working. > Cflow.xs: [... all these warnings are because

Re: RES: [Flow-tools] Flow in samples

On Mon, Oct 29, 2007 at 05:56:01PM -0200, Caio Brentano wrote: > Changing the question: Can I analyse sFlow and Netflow together? you can analyze grapefruit and netflow together if you have the right data. did you mean "do flow-tools support sFlow"? sFlow != "sampled flow" != juniper netflow sF

Re: RES: [Flow-tools] Flow in samples

On Mon, Oct 29, 2007 at 10:24:40AM -0200, Caio Brentano wrote: > Sorry, It's not clear for me! :-( > What snmp statistics you mean? the ones that are useful for scaling percentages of interface traffic to non-scaled (100%) interface traffic. e.g. ifInOctets/ifOutOctets or ifHCInOctets/ifHCOutOctet

Re: [Flow-tools] Flow in samples

flow-report treat cases like this? not automatically. -- - bill fumerola / [EMAIL PROTECTED] ___ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools

Re: [Flow-tools] flow tools tcp flags

On Tue, Nov 28, 2006 at 08:03:51PM +, Awais Awan wrote: > We know that there are 6 possible flags for TCP which are > URG-ACK-PSH-RST-SYN-FIN (ox2 giving us SYN) > > But net-flow reserves 8 bits for ip-tcp-flags (0-255 values) Can anyone > tell me why net-flow has kept 8 bits for ip-tcp-flags

Re: [Flow-tools] Cisco vs. Juniper Flows

nies, two nickles, or one dime. -- - bill fumerola / [EMAIL PROTECTED] ___ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools

Re: [Flow-tools] flow-capture and daemon mode?

synopsis of the man page is also a bug. a completely untested patch is attached (no docbook environment setup on the machine). -- - bill fumerola / [EMAIL PROTECTED] --- flow-capture.sgml.bak 2006-06-06 12:40:26.0 -0400 +++ flow-capture.sgml 2006-06-06 12:41:35.0 -0400

Re: [Flow-tools] After five hours of nomal functioning, Flowscan stops and show updatingerror

es after system > restart. restarting a machine to remove an advisory lock seems a bit extreme. -- - bill fumerola / [EMAIL PROTECTED] ___ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools

Re: [Flow-tools] Compilation problems / Gentoo AMD64

s as 'long' which is 64bit on 64bit archs [...] } > I'm at a loss. %% #include #include int main(void) { printf("%u ?= %u\n", sizeof(time_t), sizeof(unsigned int)); } %% compile that: $ cc -o foo foo.c $ ./foo i'd go on about posix and such, but there's p

Re: [Flow-tools] Measuring flows from my cisco!!!!!!

On Mon, Jan 24, 2005 at 12:16:59PM -0500, Ernesto Rubi wrote: > If you note my text, I merely expressed to the person writing from the > US that it is illegal to help the Cuban government hence OFAC/Treasury; 'person writing from the US', you say? Received: from unknown (HELO localhost) ([EMAIL

Re: [Flow-tools] Is the timestamp in each flow record CORRECT?

y) in the same aggregated flow, depending on flow granularity. -- - bill fumerola / [EMAIL PROTECTED] ___ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools

Re: [Flow-tools] How to set sampling in flow-tools ?

tes, etc. on some periodic basis and tossing the raw data. with any non-trivial amount of traffic being exported the raw data files are going to be too large to store for any reasonable amount of time (which is why flow-capture rotates these files out). -- - bill fumerola / [EMA

Re: [Flow-tools] Is the timestamp in each flow record CORRECT?

the times in each flow record are when the flow is created/torn down. flows are not per-packet (even if the flow only contains one packet). if you're looking for precise packet statistics, get a sniffer. if you're looking for aggregated traffic statistics, netflow is it.. -- - bil

Re: [Flow-tools] flow-filter: not interface #

scaping' $ !3 echo \!\!\!1st way of escaping; echo '!!!2nd way of escaping' !!!1st way of escaping !!!2nd way of escaping -- - bill fumerola / [EMAIL PROTECTED] ___ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools

Re: [Flow-tools] flow-filter: not interface #

200 [punchdrunk.local(ttypb)-fumerola Sat23Oct/15:37:00] [ SECURE !3 ]$ history 1 echo hi 2 echo hi -- - bill fumerola / [EMAIL PROTECTED] ___ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools

[Flow-tools] Re: Flowtools for FreeBSD 4.2

ile your own using the ports tree. using a package isn't going to work as there have been ABI changes since freebsd 4.2 (a 4.2 package would most likely work on recent freebsd-4, but the reverse isn't true). -- - bill fumerola / [EMAIL PROTECTED] __

Re: [Flow-tools] Flowextract tool compilation

: undefined reference to `ftio_init' [...] you need to link with the full path to ftlib.a in your linker arguments. -- - bill fumerola / [EMAIL PROTECTED] ___ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools

Re: [Flow-tools] flow file format?

the api defined in ftlib to manipulate flow-* generated data. start with the prototypes, go from there. if you're looking for the wire format, take a look at the code and URLs contained in: http://anonsvn.ethereal.com/viewcvs/viewcvs.py/trunk/epan/dissectors/packet-netflow.c?rev=11410

Re: [Flow-tools] Flow export : Format not supported

for the library. > Here is the only thing I see, "checking for my_init in -lmysqlclient... no " you could look at the config.log and can see it trying to link with "-L/usr/local/bin/mysql/lib/mysql -lmysqlclient" which won't work.. try --with-mysql=/usr/l