[netflow-tools] cisco asr 1006 netflowtool
Sokvantha YOUK
sokvantha at gmail.com
Wed Dec 2 14:37:18 EST 2009
Dear All,
I am having trouble in timestamp that sent from Cisco ASR Router 1006 to my
flowtools capture. The problem is the time stamp is late 5 hours compare
with file name.
Could you please advice me what should i do to get this problem solved?
/usr/local/flowtool/bin/flow-print -f5 < ft-v05.2009-12-01.141500+0700 >
/home/sokvantha/flow-timestamp-debug.txt
Start End Sif SrcIPaddress SrcP DIf
DstIPaddress DstP P Fl Pkts Octets
1201.09:22:16.372 1201.09:43:16.705 27 119.82.250.11 16752 4
194.183.68.237 20458 17 0 42588 2422926
1201.09:22:26.056 1201.09:43:16.716 27 119.82.250.11 16753 4
194.183.68.237 20459 17 0 249 39780
1201.09:38:58.420 1201.09:43:16.348 4 93.182.188.39 11710 27
119.82.252.133 64319 6 0 448 248826
1201.09:39:30.323 1201.09:43:16.561 4 66.96.134.10 80 28
110.74.223.13 54438 6 0 2606 3770046
1201.09:41:04.423 1201.09:43:16.967 34 118.67.204.20 49652 4
122.224.114.157 35883 6 0 581 325600
1201.09:41:04.503 1201.09:43:16.959 4 122.224.114.157 35883 34
118.67.204.20 49652 6 0 325 15402
1201.09:41:14.343 1201.09:43:16.882 4 76.117.146.191 29559 28
110.74.223.142 4544 6 0 228 215922
1201.09:41:14.726 1201.09:43:16.386 28 110.74.223.142 4544 4
76.117.146.191 29559 6 0 275 196013
1201.09:41:25.958 1201.09:43:16.226 2 218.253.64.60 10154 27
110.74.196.36 4619 6 0 68 3142
1201.09:41:59.233 1201.09:43:16.575 27 119.82.252.41 29797 4
58.61.165.218 8000 17 0 12 952
1201.09:41:59.743 1201.09:43:16.669 2 221.7.93.225 18218 28
110.74.197.34 7078 17 0 107 6984
1201.09:42:15.183 1201.09:43:16.416 4 96.49.82.47 11246 34
118.67.204.20 15000 17 0 17 1150
1201.09:42:15.187 1201.09:43:16.420 4 96.49.82.47 11246 34
118.67.204.20 56937 17 0 15 1024
1201.09:42:16.356 1201.09:43:16.009 27 119.82.253.149 37327 4
203.218.92.44 55561 6 0 17 926
1201.09:42:18.533 1201.09:43:16.230 28 119.82.253.53 1605 4
79.141.174.36 80 6 1 88 4518
1201.09:42:18.879 1201.09:43:16.217 2 79.141.174.36 80 28
119.82.253.53 1605 6 1 124 175648
1201.09:42:25.333 1201.09:43:16.281 34 118.67.204.55 57617 4
217.22.246.78 25 6 0 54 7124
1201.09:42:25.699 1201.09:43:16.645 4 217.22.246.78 25 34
118.67.204.55 57617 6 0 29 2339
1201.09:42:27.228 1201.09:43:16.830 2 114.249.128.159 63672 28
119.82.255.11 1517 6 0 28 22072
1201.09:42:27.234 1201.09:43:16.851 28 119.82.255.11 1517 4
114.249.128.159 63672 6 0 18 1118
1201.09:42:32.081 1201.09:43:16.737 27 110.74.196.133 65303 4
75.64.54.46 6244 6 0 22 1409
1201.09:42:32.408 1201.09:43:16.243 27 119.82.252.17 16291 4
208.94.234.75 80 6 1 1092 46996
1201.09:42:32.647 1201.09:43:16.237 4 208.94.234.75 80 28
119.82.252.17 16291 6 1 1781 2058359
--
Best Regards,
YOUK Sokvantha
Tell: (855) 89896589
email: sokvantha at gmail.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mindrot.org/pipermail/netflow-tools/attachments/20091202/48a5a637/attachment.html>
More information about the netflow-tools
mailing list