Hi Peter,
we have discovered issue with MiB, MB, ... prefixes in NFDUMP similar to
NfSen one a I have reported last year. NFDUMP reports the total bytes and
probably other values in MiB e.g.
90949535 ... nfcapd database entry
90949535 / 1024 / 1024 = 86,7 MiPackets (reported by NFDUMP)
90949535 / 1000 / 1000 = 90,9 MPackets (reported by NfSen)
Detailed bug description is included in attached file.
best regards
Pavel
NfSen Statistics
================
Statistics timeslot Aug 05 2008 - 08:15
Channel: Flows: Packets:
Traffic:
all: tcp: udp: icmp: other: all: tcp:
udp: icmp: other: all: tcp: udp: icmp: other:
p3000 14.5 k/s 7.1 k/s 7.1 k/s 292.4 /s 5.8 /s 303.2 k/s 269.9 k/s
30.5 k/s 2.0 k/s 876.7 /s 1.6 Gb/s 1.5 Gb/s 116.2 Mb/s 1.3 Mb/s 3.2
Mb/s
p3000 4.4 M 2.1 M 2.1 M 87.7 k 1.7 k 90.9 M 81.0 M
9.1 M 586.8 k 263.0 k 60.7 GB 56.1 GB 4.4 GB 50.6 MB 120.3
MB
NFDUMP Statistics (obtained via NfSen interface)
================================================
** nfdump -M /data/nfsen/profiles-data/live/p3000 -T -r
2008/08/05/nfcapd.200808050815 -n 10 -s ip/flows
nfdump filter:
any
Top 10 IP Addr ordered by flows:
....
Summary: total flows: 4350393, total bytes: 56.5 G, total packets: 86.7 M, avg
bps: 741.3 M, avg pps: 145648, avg bpp: 667
Time window: 2008-08-05 08:09:33 - 2008-08-05 08:19:57
Total flows processed: 4350393, Records skipped: 0, Bytes read: 226239348
Sys: 4.062s flows/second: 1070897.1 Wall: 4.074s flows/second: 1067649.2
NFDUMP Statistics (command line)
================================
nfdump -r /data/nfsen/profiles-data/live/p3000/2008/08/05/nfcapd.200808050815 -I
Ident: p3000
Flows: 4350393
Flows_tcp: 2135470
Flows_udp: 2125489
Flows_icmp: 87707
Flows_other: 1727
Packets: 90949535
Packets_tcp: 80963090
Packets_udp: 9136591
Packets_icmp: 586835
Packets_other: 263019
Bytes: 60674400342
Bytes_tcp: 56146589751
Bytes_udp: 4356911776
Bytes_icmp: 50605048
Bytes_other: 120293767
First: 1217916573
Last: 1217917197
msec_first: 357
msec_last: 801
Sequence failures: 108775
Total packets
=============
90949535 ... database entry
90949535 / 1024 / 1024 = 86,7 MiPackets (reported by NFDUMP)
90949535 / 1000 / 1000 = 90,9 MPackets (reported by NfSen)
http://en.wikipedia.org/wiki/MiB
-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Nfdump-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
