From pobrien at solananetworks.com Wed Dec 2 08:50:49 2015 From: pobrien at solananetworks.com (Paul OBrien) Date: Tue, 1 Dec 2015 16:50:49 -0500 Subject: [netflow-tools] Softflowd from PCAP StartTime wrong Message-ID: <565E1639.9090504@solananetworks.com> When I use Softflowd to generate Netflow packets the StartTime in the PDU section (wireshark CFLOW decode used) is 4000000+ into the future. An ethernet interface driven capture is only a few seconds ahead. I have seen some posting on similar findings from others but no vision if this is fixed or a configuration issue. Is this a known problem when using softflowd with pcap files?