Verifying flow to biflow conversion?

Richard Rothwell via Argus-info argus-info at lists.andrew.cmu.edu
Thu Jul 21 00:34:47 EDT 2016


Hi List,

I am seeing Argus records with source bytes and packet counts with sensible values ,
_ but with zero in the destination bytes and packet counts.

Is there any way to verify that the process of assembling biflow records is working properly.

I am looking at  ra output connected to the output of nprobe, which is performing IPFIX to Nertflow 9 conversion.

Regards
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20160721/215810c4/attachment.html>


More information about the argus mailing list