On Tue, May 18, 2004 at 08:53:56AM -0500, [EMAIL PROTECTED] wrote:
> I recently pointed two new xaddrs towards my already busy
> flow collector and now my consolidated, compressed daily
> flow files have exceeded 2GB. Because of this flow-cat
> won't touch the files - it errors out with a memory
> allocation error.
I dump flow-capture'ed flows to
10 minute files or so, like this:
interval=10 ;# minutes
rotations=`expr 24 \* 60 / $interval - 1`
flow-capture -c 5 \
-n $rotations \
-E $max_usage \
-p $router_dir/$label.pid \
-w $router_dir \
$dst/$src/$port
This won't help with your current huge
files, but would produce more manageable
files in the future.
_______________________________________________
Flow-tools mailing list
[EMAIL PROTECTED]
http://mailman.splintered.net/mailman/listinfo/flow-tools
