[netflow-tools] Duplicate flow entry

[Jason Dixon]

I'm working on a script which uses Flowd::read_flow (0.8.5 w/FIFO 
patches) to read in and then dump everything to a database.  Everything 
looks fine, except I noticed a duplication of one entry during testing. 
  The flow was a 10MB zeroes file scp'd from my laptop (192.168.0.14) to 
a server (10.0.0.104) binatted behind a PF box (192.168.0.22).  You can 
see the duplication of this flow on lines 13-16 of the ascii table at:

http://www.dixongroup.net/netmon.txt

Any idea what might have caused this duplication?  I see no other signs 
of duplication in the database.

Thanks,

--
Jason Dixon
DixonGroup Consulting
http://www.dixongroup.net