I'm interested in per IP address, not per interface. From: Joe Loiacono [mailto:[email protected]] Sent: Monday, January 31, 2011 9:47 AM To: Craig Weinhold Cc: Drew Weaver; [email protected]; [email protected] Subject: Re: [Flow-tools] Converting bytes/octets to bits per second (rough estimate
[email protected] wrote on 01/29/2011 03:46:05 PM: > Math seems sound. > > 300 seconds is a function of exporter interval and collector file > rotation. Most flows are shorter. Some will be longer if the > exporter interval (active flow timeout) isn't configured properly. > > It's safe to use 300 if you only care about aggregate flow data and > the exporter config is good. > > But, I think it's better to use start/end time to determine each > flow's length. More detail at http://wvnetflow.sourceforge.net/#key-time > > -Craig I agree with Craig on using individual flow time lengths. I would also note that this is a total of all flows collected. Depending on how many interface you are collecting from, the "per-interface" rates are a subset of this number. Joe
_______________________________________________ Flow-tools mailing list [email protected] http://mailman.splintered.net/mailman/listinfo/flow-tools
