Actually, nevermind. It turns out this field isn't useful to us (as
it's TCP only).
On 5/17/2013 2:47 PM, Brian Rak wrote:
We have some probes that can report
CLIENT_NW_DELAY_SEC/CLIENT_NW_DELAY_USEC data back to us. I'd like to
capture that data and aggregate it per source/dest IP pair. Is there
any real way to about doing this? I'm not seeing any information
about how I should be using template fields like this.
To try to explain this better, I'm ultimately trying to get the
following data via a memory table
SRC_HOST DST_HOST PACKETS BYTES CLIENT_NW_DELAY_SEC (average?)
I've managed to get everything except the delay using a basic
aggregate filter (src_host, dst_host), but I can't seem to figure out
how to get the delay output included. I'd even be happy getting the
last received value for CLIENT_NW_DELAY_SEC, I don't really need average.
_______________________________________________
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists
_______________________________________________
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists
