Interesting, none of the subnets are being determined, this is the first line of output from flow-print, and it's the same for all records:

srcIP dstIP router_sc prot srcPort dstPort octets packets
[IP]/0 192.168.x.x/0 0.0.0.0 6 445 4659 48 1


Note the x.x.x.x/0< thanks for the help, still unsure where to go from here.

Mike.

Leigh Sharpe wrote:

Sounds like one of your flows meet the criteria configured in your flowscan
config.

Run a flow-print on one of your files and see if there are any with source
or destination in the 192.168.0.0/24 subnet.


----- Original Message ----- From: "Michael Thrift" <[EMAIL PROTECTED]> To: <[email protected]> Sent: Wednesday, February 02, 2005 11:18 AM Subject: [Flow-tools] Flow hit ratio 0/208377 and blank CUFlow graphs




Hi,
   I'm trying to find a tool to faciliate realtime net flow data
analysis, currently we run stager which only operates at an hour
resolution.  FlowScan combined with stager appear to be a good
combination.  However, I can't get flowscan for report a hit ratio of
more than 0/[x thousand].  My subnets are config'd as 192.168.0.0/24,
and the results in the CUFlow graphs show nothing by NaN's.  I
understand what all of these mean (hit ration, NaN etc.) yet I cannot
get a single configuration to report anything different.  Any help with
this issue is appreciated!

Mike.

_______________________________________________
Flow-tools mailing list
[EMAIL PROTECTED]
http://mailman.splintered.net/mailman/listinfo/flow-tools








_______________________________________________ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools

Reply via email to