Peter, thanks a lot! best regards from Berlin Jens Neu Health Services Network Administration
Phone: +49 (0) 30 68905-2412 Mail: [email protected] Peter Haag <[email protected]> 03/01/2010 08:13 AM Please respond to [email protected] To [email protected] cc [email protected], Jens Neu <[email protected]> Subject Re: cisco-nsp Digest, Vol 87, Issue 93 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Jens, The time window in the summary lines includes all flows in the flow file not only those passed the filter. It should actually be limited to the filtered flows. However, it does not explain, why you see flows ending in the future. I'll fix the time window issue. - Peter Peter Haag wrote: > > Hi Jens, > I will look into that. > > - Peter > >> Dear all, > >> I've encountered a strange behavior of nfdump when running it with the -s >> and -t options. Sometimes it works as expected, sometimes it gives me >> strange values in "Time window:", e.g. > >> Time window: 2010-01-01 00:00:22 - 2010-03-13 04:34:32 > >> when running with > >> -t 2010/01/01.00:00:00-2010/01/31.00:00:00 > >> details see: http://paste.debian.net/61554/ > >> what could be the explanation? NTP issues on the router, or qualifies for >> a bug report? > >> best regards > >> Jens Neu >> Health Services Network Administration > >> Phone: +49 (0) 30 68905-2412 >> Mail: [email protected] > >> ------------------------------ > >> _______________________________________________ >> cisco-nsp mailing list >> [email protected] >> https://puck.nether.net/mailman/listinfo/cisco-nsp > >> End of cisco-nsp Digest, Vol 87, Issue 93 >> ***************************************** > - -- _______ SWITCH - The Swiss Education and Research Network ______ Peter Haag, Security Engineer, Member of SWITCH CERT PGP fingerprint: D9 31 D5 83 03 95 68 BA FB 84 CA 94 AB FC 5D D7 SWITCH, Werdstrasse 2, P.O. Box, CH-8021 Zurich, Switzerland E-mail: [email protected] Web: http://www.switch.ch/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (Darwin) iQCVAwUBS4to8P5AbZRALNr/AQL7mAP9E8giNLkq1S012c7RdiyL4OcCIHbWUMEE WaXyZJ/C4Fg30dUhipZ+AWnmy0W5j10QZzmMSQWH2N5w4F3GIpQPon/jHpMnixx+ zR3HJ2hstCOkDIx2As7+1ym51UTxtqrwpsAO8F1MSUj7pgaGIriebzbtGzCaLs/U V7zNjaLWvc4= =d2fd -----END PGP SIGNATURE----- _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
