-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi Matias,
Matias Banchoff wrote:
> Hello,
> I have a doubt about the way nfsen calculates statistics when flags -n
> and -c are given.
>
> If I write:
> -----------------------------------------------------------------------------------------------------
>
>
> nfdump -R /mydata -q -a -A srcip,dstip "net mynet/mymask" -n 1000 -c
> 100000 -o "fmt:%sa %da %byt"
> -----------------------------------------------------------------------------------------------------
> the -n 1000 flag is used to show the top 1000 flows that will be shown
> in the resulting list and the -c 100000 flag refers to the amount of
> flows used to work (make the calculations).
> My doubt is the following: Where are the 100000 flows given in the -c
> flag taken from?
> A) 100000 flows per each flow archive (In /mydata I have flow files with
> the form yearmonthdayhour). In this case, if I have n archives, I would
> have the calculations made based on 100000*n flows, which is good for me.
> B) Merging (somehow) the n file flows in the /mydata directory and
> taking the first 100000 flows from that merge.
>
- -c <cnt> takes flows from whatever input source, in the order given and stops
reading after <cnt> flows are processed.
Flows are read sequentially when giving multiple files. Assume multiple files
as one big virtual file.
- -n <num> calculate the statistics from all the flows, after reading is
completed, either by end of file or -c <cnt>
- Peter
> Thank you!
>
>
> ------------------------------------------------------------------------------
> Register Now for Creativity and Technology (CaT), June 3rd, NYC. CaT
> is a gathering of tech-side developers & brand creativity professionals. Meet
> the minds behind Google Creative Lab, Visual Complexity, Processing, &
> iPhoneDevCamp asthey present alongside digital heavyweights like Barbarian
> Group, R/GA, & Big Spaceship. http://www.creativitycat.com
> _______________________________________________
> Nfsen-discuss mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
- --
_______ SWITCH - The Swiss Education and Research Network ______
Peter Haag, Security Engineer, Member of SWITCH CERT
PGP fingerprint: D9 31 D5 83 03 95 68 BA FB 84 CA 94 AB FC 5D D7
SWITCH, Werdstrasse 2, P.O. Box, CH-8021 Zurich, Switzerland
E-mail: [email protected] Web: http://www.switch.ch/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Darwin)
iQCVAwUBShuktf5AbZRALNr/AQJeEAP/cuKVQiQiFRGUedsrpIaq1T3gGvN2MTFW
9BekFgC6BqqGys7m+yEg2khQ/IcERCXAtFM6MHPLUbtzNB4If22j4m5ekjy+isEU
JN/3txrW+CyBTWcnYt1zt9+jnWlFMFWED8M/pyGgQyrxKmO91HgNBVZNyWbi6D8X
Cn2CLpaK5og=
=v5Db
-----END PGP SIGNATURE-----
------------------------------------------------------------------------------
Register Now for Creativity and Technology (CaT), June 3rd, NYC. CaT
is a gathering of tech-side developers & brand creativity professionals. Meet
the minds behind Google Creative Lab, Visual Complexity, Processing, &
iPhoneDevCamp asthey present alongside digital heavyweights like Barbarian
Group, R/GA, & Big Spaceship. http://www.creativitycat.com
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
