Phase shift if raw flows timestamps

From: Jeffrey Papen (jpapen@yahoo-inc.com)
Date: Fri Mar 23 2001 - 19:45:30 PST

  • Next message: Kuriyama, Kent K Mr (CPF N671KK): "Problem starting 'cflowd'"

    I've installed the Plonka patch to cflowd, and I've noticed that the raw file get written a little later each time (about 1-2 seconds actually). Has anyone else noticed this? Is there a way to fix it? I've configured cflowd with -s900 to rotate logs every 15 minutes.

    Could cflowd watch an internal timer and "eat" the 1-2 seconds it takes to rotate files rather than pushing every file back farther?

    Thanks,
    - Jeffrey

                    108240 Mar 22 16:59 flows.20010322_17:00:05-0800
                     43120 Mar 22 17:14 flows.20010322_17:15:07-0800
                     33440 Mar 22 17:30 flows.20010322_17:30:08-0800
                     60830 Mar 22 17:45 flows.20010322_17:45:10-0800
                     62425 Mar 22 18:00 flows.20010322_18:00:12-0800
                     82995 Mar 22 18:15 flows.20010322_18:15:14-0800
                     37510 Mar 22 18:30 flows.20010322_18:30:16-0800
                     41140 Mar 22 18:45 flows.20010322_18:45:17-0800
                     51205 Mar 22 19:00 flows.20010322_19:00:19-0800
                     80630 Mar 22 19:15 flows.20010322_19:15:20-0800
                     70675 Mar 22 19:30 flows.20010322_19:30:21-0800
                     57695 Mar 22 19:45 flows.20010322_19:45:22-0800
                     64625 Mar 22 20:00 flows.20010322_20:00:23-0800
                     86900 Mar 22 20:15 flows.20010322_20:15:24-0800
                     88770 Mar 22 20:30 flows.20010322_20:30:25-0800
                     76065 Mar 22 20:45 flows.20010322_20:45:27-0800
                     81125 Mar 22 21:00 flows.20010322_21:00:29-0800
                     39710 Mar 22 21:15 flows.20010322_21:15:31-0800
                     46750 Mar 22 21:30 flows.20010322_21:30:32-0800
                     73755 Mar 22 21:45 flows.20010322_21:45:34-0800
                     44000 Mar 22 22:00 flows.20010322_22:00:36-0800
                     58300 Mar 22 22:15 flows.20010322_22:15:37-0800
                    106095 Mar 22 22:30 flows.20010322_22:30:38-0800
                    144320 Mar 22 22:45 flows.20010322_22:45:39-0800
                    160545 Mar 22 23:00 flows.20010322_23:00:40-0800
                    182600 Mar 22 23:15 flows.20010322_23:15:42-0800
                    133320 Mar 22 23:30 flows.20010322_23:30:44-0800
                     47135 Mar 22 23:45 flows.20010322_23:45:46-0800
                     51205 Mar 23 00:00 flows.20010323_00:00:47-0800
                     49720 Mar 23 00:15 flows.20010323_00:15:48-0800
                     16005 Mar 23 00:30 flows.20010323_00:30:49-0800
                      9185 Mar 23 00:45 flows.20010323_00:45:50-0800
                     25575 Mar 23 01:00 flows.20010323_01:00:52-0800
                     34320 Mar 23 01:15 flows.20010323_01:15:55-0800
                     16060 Mar 23 01:29 flows.20010323_01:30:56-0800
                     25410 Mar 23 01:45 flows.20010323_01:45:57-0800
                     18700 Mar 23 02:00 flows.20010323_02:00:58-0800
                     37345 Mar 23 02:15 flows.20010323_02:15:59-0800
                     36850 Mar 23 02:30 flows.20010323_02:31:00-0800
                     96360 Mar 23 02:46 flows.20010323_02:46:02-0800
                    111540 Mar 23 03:01 flows.20010323_03:01:03-0800
                    121165 Mar 23 03:15 flows.20010323_03:16:05-0800
                    107195 Mar 23 03:30 flows.20010323_03:31:06-0800
                     41580 Mar 23 03:45 flows.20010323_03:46:07-0800
                     14685 Mar 23 04:01 flows.20010323_04:01:09-0800
                     12815 Mar 23 04:16 flows.20010323_04:16:10-0800
                     32395 Mar 23 04:31 flows.20010323_04:31:11-0800
                     37840 Mar 23 04:44 flows.20010323_04:46:13-0800
                      9020 Mar 23 05:01 flows.20010323_05:01:15-0800
                     63415 Mar 23 05:16 flows.20010323_05:16:17-0800
                     60885 Mar 23 05:31 flows.20010323_05:31:18-0800
                     58630 Mar 23 05:46 flows.20010323_05:46:20-0800
                     63745 Mar 23 06:01 flows.20010323_06:01:21-0800
                     94875 Mar 23 06:16 flows.20010323_06:16:22-0800
                    128315 Mar 23 06:31 flows.20010323_06:31:24-0800
                    108295 Mar 23 06:46 flows.20010323_06:46:25-0800
                    162360 Mar 23 07:01 flows.20010323_07:01:26-0800
                    228855 Mar 23 07:16 flows.20010323_07:16:28-0800
                    160545 Mar 23 07:31 flows.20010323_07:31:29-0800
                    692670 Mar 23 07:46 flows.20010323_07:46:32-0800
                    565950 Mar 23 08:01 flows.20010323_08:01:34-0800
                    225115 Mar 23 08:16 flows.20010323_08:16:35-0800
                    113575 Mar 23 08:31 flows.20010323_08:31:37-0800
                    105105 Mar 23 08:46 flows.20010323_08:46:39-0800
                    103400 Mar 23 09:01 flows.20010323_09:01:40-0800
                     57860 Mar 23 09:16 flows.20010323_09:16:42-0800
                     23760 Mar 23 09:31 flows.20010323_09:31:44-0800
                     18865 Mar 23 09:46 flows.20010323_09:46:46-0800
                     31735 Mar 23 10:01 flows.20010323_10:01:47-0800
                     48565 Mar 23 10:16 flows.20010323_10:16:48-0800
                     49830 Mar 23 10:31 flows.20010323_10:31:49-0800
                     74855 Mar 23 10:46 flows.20010323_10:46:52-0800
                     64680 Mar 23 11:01 flows.20010323_11:01:54-0800
                     89430 Mar 23 11:16 flows.20010323_11:16:55-0800
                     97185 Mar 23 11:31 flows.20010323_11:31:56-0800
                     70070 Mar 23 11:46 flows.20010323_11:46:57-0800
                     91740 Mar 23 12:01 flows.20010323_12:01:59-0800
                     89595 Mar 23 12:16 flows.20010323_12:17:01-0800
                    143440 Mar 23 12:31 flows.20010323_12:32:02-0800
                    181280 Mar 23 12:47 flows.20010323_12:47:04-0800
                    146245 Mar 23 13:01 flows.20010323_13:02:07-0800
                    155320 Mar 23 13:17 flows.20010323_13:17:08-0800
                    184910 Mar 23 13:32 flows.20010323_13:32:09-0800
                     78650 Mar 23 13:47 flows.20010323_13:47:10-0800
                     49665 Mar 23 14:02 flows.20010323_14:02:12-0800
                     92290 Mar 23 14:17 flows.20010323_14:17:13-0800
                     85855 Mar 23 14:32 flows.20010323_14:32:14-0800:

    --
    cflowd mailing list
    cflowd@caida.org
    



    This archive was generated by hypermail 2b29 : Fri Mar 23 2001 - 19:50:25 PST