Hi Dave,

not all flows have a 17hours timestamp, i have flows in the same csv within
the 18:45-18:50 interval.

On Fri, Jan 4, 2013 at 7:28 PM, Dave Deitrich <deitr...@cymru.com> wrote:

>
>
> On 1/4/13 11:14 AM, alex adamos wrote:
>
> > i'm getting a csv output with nfdump (nfdump -r
> /var/netflow/2012/12/11/18/nfcapd.201212111845 -b -o csv), but in the csv
> file, i have flows with ts-te= 2012-12-11 17:43:10 for instance. Why do i
> get this? i have the csv file attached.
>
> Hi Alex,
>
> Are you asking why the timestamps are in the 17:00 hour even though the
> nfcapd file is dated 18:45?  If so, check the ntp and timezone settings on
> your router.  The start and end times are based on the clock settings of
> the exporting device, not the receiver.
>
> Hope this helps.
>
> --
> Dave Deitrich
> deitr...@cymru.com
>
>
> ------------------------------------------------------------------------------
> Master HTML5, CSS3, ASP.NET, MVC, AJAX, Knockout.js, Web API and
> much more. Get web development skills now with LearnDevNow -
> 350+ hours of step-by-step video tutorials by Microsoft MVPs and experts.
> SALE $99.99 this month only -- learn more at:
> http://p.sf.net/sfu/learnmore_122812
> _______________________________________________
> Nfdump-discuss mailing list
> Nfdump-discuss@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
>
------------------------------------------------------------------------------
Master HTML5, CSS3, ASP.NET, MVC, AJAX, Knockout.js, Web API and
much more. Get web development skills now with LearnDevNow -
350+ hours of step-by-step video tutorials by Microsoft MVPs and experts.
SALE $99.99 this month only -- learn more at:
http://p.sf.net/sfu/learnmore_122812
_______________________________________________
Nfdump-discuss mailing list
Nfdump-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfdump-discuss

Reply via email to