[netflow-tools] Softflowd from PCAP StartTime wrong

Paul OBrien pobrien at solananetworks.com
Wed Dec 2 08:50:49 AEDT 2015

When I use Softflowd to generate Netflow packets the StartTime in the 
PDU section (wireshark CFLOW decode used)  is 4000000+  into the future.

An ethernet interface driven capture is only a few seconds ahead.

I have seen some posting on similar findings from others but no vision 
if this is fixed or a configuration issue.

Is this a known problem when using softflowd with pcap files?

More information about the netflow-tools mailing list