Hi guys. My nfsen platform is working very nice but I founded this error while doing filtering operation:
** nfdump -M /data/nfsen/profiles-data/live/r_bgp -T -r 2020/08/17/nfcapd.202008172310 -n 10 -s ip/bps nfdump filter: any Top 10 IP Addr ordered by bps: Date first seen Duration Proto IP Addr Flows(%) Packets(%) Bytes(%) pps bps bpp 1969-12-31 21:00:00.000 0.000 any 0.0.0.0 <http://172.30.6.102/nfsen/nfsen.php#null> 25( 0.0) 60( 0.0) 6390( 0.0) 0 0 106 1969-12-31 21:00:00.000 0.000 any 255.255.255.255 <http://172.30.6.102/nfsen/nfsen.php#null> 354( 0.0) 384( 0.0) 58505( 0.0) 0 0 152 1969-12-31 21:00:00.000 0.000 any 23.79.255.211 <http://172.30.6.102/nfsen/nfsen.php#null> 2( 0.0) 2( 0.0) 160( 0.0) 0 0 80 1969-12-31 21:00:00.000 0.000 any 201.191.255.184 <http://172.30.6.102/nfsen/nfsen.php#null> 2( 0.0) 2( 0.0) 292( 0.0) 0 0 146 1969-12-31 21:00:00.000 0.000 any 186.95.255.183 <http://172.30.6.102/nfsen/nfsen.php#null> 3( 0.0) 10( 0.0) 516( 0.0) 0 0 51 1969-12-31 21:00:00.000 0.000 any 24.207.255.170 <http://172.30.6.102/nfsen/nfsen.php#null> 4( 0.0) 6( 0.0) 1344( 0.0) 0 0 224 1969-12-31 21:00:00.000 0.000 any 196.191.255.160 <http://172.30.6.102/nfsen/nfsen.php#null> 3( 0.0) 51( 0.0) 6862( 0.0) 0 0 134 1969-12-31 21:00:00.000 0.000 any 201.191.255.139 <http://172.30.6.102/nfsen/nfsen.php#null> 1( 0.0) 1( 0.0) 132( 0.0) 0 0 132 1969-12-31 21:00:00.000 0.000 any 80.239.255.118 <http://172.30.6.102/nfsen/nfsen.php#null> 2( 0.0) 2( 0.0) 160( 0.0) 0 0 80 1969-12-31 21:00:00.000 0.000 any 5.255.255.77 <http://172.30.6.102/nfsen/nfsen.php#null> 10( 0.0) 160( 0.0) 52511( 0.0) 0 0 328 As you can see both pps and bps columns shows zero. I'm receiving ipfix from mikrotik device. Any idea ? btw: In order to get top src ip talker is it I can use order by bytes ... should have similar result? (I need to get where is coming from most traffic to my customers). Regards. Leandro <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail> Libre de virus. www.avast.com <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail> <#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>
_______________________________________________ Nfsen-discuss mailing list Nfsen-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
