Thanks Nick for the hint, but we don't use IPv6 nor on our routers (Extreme Networks and Sflow) neither on the hosts generating flows.
It seems that the daily interval totals half the bytes than the sum of all 5-minutes intervals over the same day It seems that the daily interval totals more bytes than actually seen by other tools (as if the daily total was taking into account flows that began the days before). I'm a bit puzzled and I cannot trust nfdump for this measurements ... Cheers, Bruno. On 09/14/2016 10:05 AM, Nikolaos Milas wrote: > If you are using IPv6 on your router(s) and you are exporting IPv6 > flows, I believe that it is very probable that you are another victim of > this bug: > > https://github.com/phaag/nfdump/issues/33 > > which has not been fixed yet. > > You can easily test if this is your problem, by disabling IPv6 netflow > export on your router(s). > > Good luck, > Nick > > > On 14/9/2016 9:52 πμ, Bruno Lebayle wrote: > >> Seems that Nfdump for a given interval includes flows that have started >> before the interval, so statistics get exaggerated. Any hint? > -- Bruno LEBAYLE. _____________________________________________________________________ o o o o Bruno LEBAYLE - Systems and Communications group o o o o o E.S.R.F (European Synchrotron Radiation Facility) o ooo o 71, avenue des Martyrs CS40220 o o o ooooo o o o 38043 GRENOBLE CEDEX 9 o ooo o phone (33)4-7688-2258 o o o o o fax (33)4-7688-2020 o o o email leba...@esrf.fr o http://www.esrf.fr _____________________________________________________________________ ------------------------------------------------------------------------------ _______________________________________________ Nfsen-discuss mailing list Nfsen-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
