racount

[CS Lee]

Carter,

I want to know how many flow record for the ip transaction -

racount -r Book-1.arg3.bz2 - ip
racount   records     total_pkts     src_pkts       dst_pkts
total_bytes        src_bytes          dst_bytes
    sum   *42205*       1365727        630034         735693
978069190          246465274          731603916

ra -nr Book-1.arg3.bz2 - ip | wc -l
*42204*

I'm wondering why racount always has additional 1 record after I have tested
in on other argus data too.


Thanks.

-- 
Best Regards,

CS Lee<geekooL[at]gmail.com>

http://geek00l.blogspot.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20071205/082bd50d/attachment.html>