The last_switched and First switched are flow start and end times LAST_SWITCHED 21 4 System uptime at which the last packet of this flow was switched FIRST_SWITCHED 22 4 System uptime at which the first packet of this flow was switched
http://www.cisco.com/en/US/products/ps6601/products_white_paper09186a008 00a3db9.shtml > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > Sasa Dautovic > Sent: Tuesday, January 03, 2006 1:18 AM > To: [email protected] > Subject: [Flow-tools] Question for flow tools v9 timestamp > > Hello, > > I'm seeking for help with flow tools version 9. I collect > flows from a router with flow version 9. I get these fields: > > Flow field: LAST_SWITCHED, ID: 21, length: 4, data: > 3442512445 > Flow field: FIRST_SWITCHED, ID: 22, length: 4, data: > 3442511170 > > How can I get the timestamp (real time) when was this flow > started and stopped? > thnx for help > > > -- > Sasa Dautovic > <[EMAIL PROTECTED]> > > _______________________________________________ > Flow-tools mailing list > [EMAIL PROTECTED] > http://mailman.splintered.net/mailman/listinfo/flow-tools > _______________________________________________ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools
