It probably does ignore the timestamp - you'll have to check the code to be sure. But the basic assumption is that netflows are fairly contemporaneous -- delayed ms not seconds or minutes. See this: http://mailman.splintered.net/pipermail/flow-tools/2004-March/002039.html
-----Burton -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matthias Rieber Sent: Saturday, July 02, 2005 11:06 AM To: [email protected] Subject: [Ntop] netflow and network load statistic Hi, it seems that the network load statistic ignores the timestamp in the netflow packages. When I use the default settings of 'fprobe', active flows expire after 300 seconds. The network load graph is redraw more often. When such a flow package arrives I'll have peak in the graphic which is bigger than the physical speed of the interface. When I change the expire time to a smaller value, the graph is accurate. Is this a problem with my configuration or it's the expected behaviour, because it's to difficult to recalculate historical data. regards, matthias _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
