03.07.09, 14:50, "Joerg Goltermann" <j...@osn.de>: > Index: sbin/pfctl/pfctl_parser.c
After patch: /etc/pf.conf ------------ set timeout pflowexport 10 # /flow-cat ft* | flow-export -f 2 > out.csv out.csv ------- #:unix_secs,unix_nsecs,sysuptime,exaddr,dpkts,doctets,first,last,engine_type,engine_id,srcaddr,dstaddr,nexthop,input,output,srcport,dstport,prot,tos,tcp_flags ,src_mask,dst_mask,src_as,dst_as 1246955430,6359600,63745000,192.168.70.254,4,241,63655000,63655000,42,42,192.168.70.254,192.168.70.251,0.0.0.0,0,0,10050,50659,6,0,0,0,0,0,0 1246955440,6360600,63755000,192.168.70.254,5,288,63655000,63655000,42,42,192.168.70.251,192.168.70.254,0.0.0.0,0,0,50662,10050,6,0,0,0,0,0,0 1246955440,6360600,63755000,192.168.70.254,4,243,63655000,63655000,42,42,192.168.70.254,192.168.70.251,0.0.0.0,0,0,10050,50662,6,0,0,0,0,0,0 1246955440,6360600,63755000,192.168.70.254,113,18378,57699000,4272321296,42,42,192.168.100.1,205.188.1.226,0.0.0.0,0,0,1273,5190,6,0,0,0,0,0,0 1246955440,6360600,63755000,192.168.70.254,110,42627,57699000,4272321296,42,42,205.188.1.226,192.168.100.1,0.0.0.0,0,0,5190,1273,6,0,0,0,0,0,0 1246955440,6360600,63755000,192.168.70.254,113,18378,57699000,4272321296,42,42,192.168.1.2,205.188.1.226,0.0.0.0,0,0,61158,5190,6,0,0,0,0,0,0 1246955440,6360600,63755000,192.168.70.254,110,42627,57699000,4272321296,42,42,205.188.1.226,192.168.1.2,0.0.0.0,0,0,5190,61158,6,0,0,0,0,0,0 1246955440,6360600,63755000,192.168.70.254,5,279,63658000,63665000,42,42,192.168.70.251,192.168.70.254,0.0.0.0,0,0,50677,10050,6,0,0,0,0,0,0 1246955440,6360600,63755000,192.168.70.254,4,234,63658000,63665000,42,42,192.168.70.254,192.168.70.251,0.0.0.0,0,0,10050,50677,6,0,0,0,0,0,0 1246955440,6360600,63755000,192.168.70.254,5,290,63660000,63665000,42,42,192.168.70.251,192.168.70.254,0.0.0.0,0,0,50679,10050,6,0,0,0,0,0,0 lines 4-7 - strange big 'last' values, and last > first that is incorrect.
