[netflow-tools] Flow time query

[Robin Breathe]

The actual_flows_start equation I gave before was total junk.

Does the following look more reasonable?

unix_flow_start = (ntohl(flow->ainfo.time_sec)
	- ntohl(flow->ainfo.sys_uptime_ms)/1000)
	+ ntohl(flow->ftimes.flow_start)/1000;

This appears to give relatively sensible results, but is it correct?

Robin
-- 
Robin Breathe, Computer Services, Oxford Brookes University, Oxford, UK
rbreathe at brookes.ac.uk       Tel: +44 1865 483685  Fax: +44 1865 483073

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 187 bytes
Desc: OpenPGP digital signature
Url : http://lists.mindrot.org/pipermail/netflow-tools/attachments/20050926/37c5f282/attachment.bin