Hello,
I am using nfdump 1.6.5 and I've seen a problem in MPLS format when
using -s option:
> nfdump -N -r nfcapd.201203091405 -n 10 -s mpls2/bytes
Top 10 MPLS lab 2 ordered by bytes:
Date first seen Duration Proto MPLS lab 2 Flows(%)
Packets(%) Bytes(%) pps bps bpp
2012-03-09 14:04:28.681 323.296 any 4556960301056-0-0
152155(41.1) 48408073(56.7) 70537901531(57.4) 149732 1745469205
1457
...
Possibly the MPLS label 2 is 32 bits left shifted:
4556960301056 / (2^32) = 1061
When I dump the same file without -s option the format looks right:
> nfdump -r nfcapd.201203091405 -o "fmt: %mpls2"
MPLS lbl 2
1061-1-0
1061-1-0
I am not sure but I think the problem is related with even MPLS fields
because I can't see any problem doing the same with MPLS Label 1.
I appreciate any help or hint to solve this.
--
Pedro
------------------------------------------------------------------------------
This SF email is sponsosred by:
Try Windows Azure free for 90 days Click Here
http://p.sf.net/sfu/sfd2d-msazure
_______________________________________________
Nfdump-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
