Hey, I was wondering: Why is it possible to base your conditions in the alert filter using individual Top 1 statistics on FLOWS, while in the "Stat Top N" options (Details tab) you can only select packets or traffic in the "Limit" field. The website says: "Conditions may also be based on the top 1 statistic after filtering the flows. These are the well known top N statistics of nfdump."
But somehow they are not, as I have more options to chose from in the alert conditions. What am I missing here? What I need is to tell nfdump to aggregate a certain filter by source IP but to list only IPs with at least X flows (I need flows instead of packets here)... -best regards, bjoern ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ _______________________________________________ Nfsen-discuss mailing list Nfsen-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
