Unfortunately I don't have pcap data for this, full packet capture is
next on my to-do list so if it happens again I should have something to
pass on. Thanks anyways.
Regards,
Sion
-----Original Message-----
From: Peter Haag [mailto:[email protected]]
Sent: 08 April 2009 13:07
To: Dafydd, Sion
Cc: [email protected]
Subject: Re: [Nfsen-discuss] Help with Nfsen Output
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi Sion,
I'm currently not aware of any bug concerning this issue. To track that
I would need a pcap file, containing the flow
data traffic, otherwise, it's difficult.
- Peter
Dafydd, Sion wrote:
> Hi,
>
> I'm hoping somebody can help me get my head around the following
output:
>
> Date flow start Duration Proto Src IP Addr:Port
> Dst IP Addr:Port Flags Tos Packets Bytes Flows
> 2009-04-02 09:13:53.653 613.109 0 xxx.xxx.xxx.xxx:0 ->
> yyy.yyy.yyy.yyy:0 ...... 0 968.8 M 44.0 G 69771
> 2009-04-02 09:13:53.653 613.109 0 yyy.yyy.yyy.yyy:0 ->
> xxx.xxx.xxx.xxx:0 ...... 0 12.5 M 2.0 G 57504
>
> Obviously over a 100 Mbps link the above is not possible, what could
> have caused these figures? We did have a (unexplained as of yet)
glitch
> on our network at around this time but the above stats don't tie up
with
> our other monitoring software (snmp based) which does not show any
> spikes at all.
>
> Regards,
>
> Sion
>
>
------------------------------------------------------------------------
------
> This SF.net email is sponsored by:
> High Quality Requirements in a Collaborative Environment.
> Download a free trial of Rational Requirements Composer Now!
> http://p.sf.net/sfu/www-ibm-com
> _______________________________________________
> Nfsen-discuss mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
- --
_______ SWITCH - The Swiss Education and Research Network ______
Peter Haag, Security Engineer, Member of SWITCH CERT
PGP fingerprint: D9 31 D5 83 03 95 68 BA FB 84 CA 94 AB FC 5D D7
SWITCH, Werdstrasse 2, P.O. Box, CH-8021 Zurich, Switzerland
E-mail: [email protected] Web: http://www.switch.ch/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Darwin)
iQCVAwUBSdyTXP5AbZRALNr/AQLGiwP/Qq5yH/0DeRALfPC2o8x+0wPLlC61SCH4
vZHdl3mx018IfG4LOyFMhJg3z/g60AWVJ0Ez810sKkGDNTJC2apHaH8dJnhvEEYB
+zKV49UrpeKSiG5zUt2QfEwBfj/XZjCoBL3sAP3eb/mSM9qPcI1288oKTRWGVXl7
87IHjfjXaDQ=
=Yzp6
-----END PGP SIGNATURE-----
------------------------------------------------------------------------------
This SF.net email is sponsored by:
High Quality Requirements in a Collaborative Environment.
Download a free trial of Rational Requirements Composer Now!
http://p.sf.net/sfu/www-ibm-com
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
