hi, im collecting netflow from a obsd box with flowd version 0.9, if i try to see some stats with flow-tools i get the following.. /usr/src/flow-tools-0.68# flow-cat *bin flow-cat: ftiheader_read(): Warning, bad magic number flow-cat: ftiheader_read(2008-02-17-06:00-flow.bin): Failed, ignoring file. flow-cat: ftiheader_read(): Warning, bad magic number flow-cat: ftiheader_read(2008-02-17-06:15-flow.bin): Failed, ignoring file. flow-cat: ftiheader_read(): Warning, bad magic number flow-cat: ftiheader_read(2008-02-17-06:30-flow.bin): Failed, ignoring file. flow-cat: ftiheader_read(): Warning, bad magic number flow-cat: ftiheader_read(2008-02-17-06:45-flow.bin): Failed, ignoring file. flow-cat: ftiheader_read(): Warning, bad magic number flow-cat: ftiheader_read(flow-log2rrd): Failed, ignoring file. flow-cat: ftiheader_read(): Warning, bad magic number flow-cat: ftiheader_read(flow-rpt2rrd): Failed, ignoring file. flow-cat: ftiheader_read(): Warning, bad magic number flow-cat: ftiheader_read(flow-rptfmt): Failed, ignoring file. flow-cat: ftiheader_read(): Warning, bad magic number flow-cat: ftiheader_read(Makefile.am): Failed, ignoring file. flow-cat: ftiheader_read(): Warning, bad magic number flow-cat: ftiheader_read(Makefile.in): Failed, ignoring file. flow-cat: ftiheader_read(): Warning, bad magic number flow-cat: ftiheader_read(Makefile): Failed, ignoring file. thx memic
hm, thats the point, using perl or python seems to be to slow form me.. Jesse Kempf schrieb:> > On Mar 12, 2008, at 10:00 AM, memic wrote: > >> hi, >> >> im collecting netflow from a obsd box with flowd version 0.9, >> >> if i try to see some stats with flow-tools i get the following.. > > Flowd uses its own cooked format for on-disk storage. There are perl > and python modules for parsing the file format. > > Cheers, > -Jesse > > > > ------------------------------------------------------------------------ > The information contained in this communication is intended > only for the use of the recipient(s) named above. It may > contain information that is privileged or confidential, and > may be protected by State and/or Federal Regulations. If > the reader of this message is not the intended recipient, > you are hereby notified that any dissemination, > distribution, or copying of this communication, or any of > its contents, is strictly prohibited. If you have received > this communication in error, please return it to the sender > immediately and delete the original message and any copy > of it from your computer system. If you have any questions > concerning this message, please contact the sender. > ------------------------------------------------------------------------ >
memic wrote:> hm, thats the point, using perl or python seems to > be to slow form me.. >I''m not entirely clear on what you mean by that. Have you actually tried the perl or python wrappers? Cheers, -Jesse Kempf ------------------------------------------------------------------------ The information contained in this communication is intended only for the use of the recipient(s) named above. It may contain information that is privileged or confidential, and may be protected by State and/or Federal Regulations. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this communication, or any of its contents, is strictly prohibited. If you have received this communication in error, please return it to the sender immediately and delete the original message and any copy of it from your computer system. If you have any questions concerning this message, please contact the sender. ------------------------------------------------------------------------