* Matt Hamilton ma...@netsight.co.uk [2013-09-10 12:30]:
sven falempin sven.falempin at gmail.com writes:
[nonsense deleted]
The problem is that (I believe) that the pflow packet is not generated until
the state expires from pf. In the case of the scp transfer I saw that was not
for several
sven falempin sven.falempin at gmail.com writes:
The manual say the information is extracted from the state table.
So you should have seen the info.
First: are you sure the information wasnt in the udp pflow packets ? maybe
the collector was wrong.
Second: man says The packet size and
Hi All,
We use pflow with pf to export packets to a collector for billing/monitoring
purposes. The problem we have is that someone at the weekend had a very
long running scp connection over several days that transferred a TB
of data. The data was not logged via pflow until the state expired, so
The manual say the information is extracted from the state table.
So you should have seen the info.
First: are you sure the information wasnt in the udp pflow packets ? maybe
the collector was wrong.
Second: man says The packet size and thus the maximum number of flows is
controlled by the mtu.
4 matches
Mail list logo
