Hi Michael, On Sat, Feb 09, 2008 at 03:44:35PM +0700, michael kapelko wrote: > I run flow-capture at 15:30. Then changed date to 16:30, flow-capture > started to write to tmp-16:30. Then I changed time back to 15:30 and > flow-capture contiuned to write to that file until i changed back to 16 > hours and saved that file as 16:30 only by 16:32.
I'm not exactly following why you did this experiment in this way, but I'm not sure it's important... You tell flow capture the number of times to rotate per day (-n), and it names the tmp files and output files when it creates them on rotation. If "per day" means 24 hours (rather than per calendar day), then DST does not affect when files are rotated since time continues to monotonically increase. So, unless you slam the system clock to a discontinuous value, you'd expect the same amount of time to be represented in each file. > So my question is what will happen when hour is added or subtracted in > Summer and Winter time? Will flow-capture overwrite flow or append more > traffic to already saved files? flow-capture does the right thing, IMO, by including the timzeone (strftime's %z) as hours east of (offset) from GMT at the tail of the file name. For DST, of course, the number of hours from GMT will differ before and after the timzesone shift so the names won't collide. For instance, I am either 5 or 6 hours west of GMT, so my files are named: ft-v05.2008-02-09.163000-0500 ft-v05.2008-02-09.163000-0600 Dave -- [EMAIL PROTECTED] http://net.doit.wisc.edu/~plonka/ Madison, WI _______________________________________________ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools
