On Apr 5, 2004, at 9:50 AM, Eric Rousse wrote:
Why is there a difference in the values ? flow-stat -f11 gives me 257gig and flow-stat -f7 546gig.
Is there something that I've done wrong ?
-f7 isn't useful for accounting if the source and destination port are the same. What you may want to do is create a TCP/UDP filter and then use -f11.
Personally I prefer to always match on an interface to determine "in" and "out" for accounting purposes then run individual reports for source and destination address.
-- mark
_______________________________________________ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools
