ragraph and unsorted files

[Rafael Barbosa]

Hi all,

I run into something today that might be considered a bug: ragraph does not
handle well files that are not ordered by 'stime'. Basically it seems that
ragraph uses the info of the first record to initialize the timeseries, so
flows that are before in time (but later in the file) are ignored, or at
least erroneously processed.

I upload the file 'ragraph-unsorted.zip' to ftp://qosient.com/incoming that
contains an example.

An easy work around is to make sure that the file is ordered, with rasort(),
before using ragraph. E.g.:
rasort -m stime -r flows.argus -w sorted.argus

Best regards,
Rafael Barbosa
http://www.vf.utwente.nl/~barbosarr/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20110502/0cda60dc/attachment.html>