Re: Phase shift if raw flows timestamps

From: Hendrik Visage (hvisage@envisage.co.za)
Date: Sun Mar 25 2001 - 01:31:08 PST

  • Next message: Andreas Klemm: "Re: Problem solved: Problem starting 'cflowd'"

    On Fri, Mar 23, 2001 at 07:45:30PM -0800, Jeffrey Papen wrote:
    > I've installed the Plonka patch to cflowd, and I've noticed that the raw file get written a little later each time (about 1-2 seconds actually). Has anyone else noticed this? Is there a way to fix it? I've configured cflowd with -s900 to rotate logs every 15 minutes.

    >
    > Could cflowd watch an internal timer and "eat" the 1-2 seconds it takes to rotate files rather than pushing every file back farther?

    That's the reason for my set of "fixes" to the Plonka patches.
    Actually I discarded a few of the plonka patches to be able to correctly
    do it the way i wanted it ;^)

    ftp://hvs.envisage.co.za/pub/cflowd-hvt

    using mine, it'll drop it at every N seconds, regardles

    Greetz
    Hendrik

    >
    > Thanks,
    > - Jeffrey
    >
    > 108240 Mar 22 16:59 flows.20010322_17:00:05-0800
    > 43120 Mar 22 17:14 flows.20010322_17:15:07-0800
    > 33440 Mar 22 17:30 flows.20010322_17:30:08-0800
    > 60830 Mar 22 17:45 flows.20010322_17:45:10-0800
    > 62425 Mar 22 18:00 flows.20010322_18:00:12-0800
    > 82995 Mar 22 18:15 flows.20010322_18:15:14-0800
    > 37510 Mar 22 18:30 flows.20010322_18:30:16-0800
    > 41140 Mar 22 18:45 flows.20010322_18:45:17-0800
    > 51205 Mar 22 19:00 flows.20010322_19:00:19-0800
    > 80630 Mar 22 19:15 flows.20010322_19:15:20-0800
    > 70675 Mar 22 19:30 flows.20010322_19:30:21-0800
    > 57695 Mar 22 19:45 flows.20010322_19:45:22-0800
    > 64625 Mar 22 20:00 flows.20010322_20:00:23-0800
    > 86900 Mar 22 20:15 flows.20010322_20:15:24-0800
    > 88770 Mar 22 20:30 flows.20010322_20:30:25-0800
    > 76065 Mar 22 20:45 flows.20010322_20:45:27-0800
    > 81125 Mar 22 21:00 flows.20010322_21:00:29-0800
    > 39710 Mar 22 21:15 flows.20010322_21:15:31-0800
    > 46750 Mar 22 21:30 flows.20010322_21:30:32-0800
    > 73755 Mar 22 21:45 flows.20010322_21:45:34-0800
    > 44000 Mar 22 22:00 flows.20010322_22:00:36-0800
    > 58300 Mar 22 22:15 flows.20010322_22:15:37-0800
    > 106095 Mar 22 22:30 flows.20010322_22:30:38-0800
    > 144320 Mar 22 22:45 flows.20010322_22:45:39-0800
    > 160545 Mar 22 23:00 flows.20010322_23:00:40-0800
    > 182600 Mar 22 23:15 flows.20010322_23:15:42-0800
    > 133320 Mar 22 23:30 flows.20010322_23:30:44-0800
    > 47135 Mar 22 23:45 flows.20010322_23:45:46-0800
    > 51205 Mar 23 00:00 flows.20010323_00:00:47-0800
    > 49720 Mar 23 00:15 flows.20010323_00:15:48-0800
    > 16005 Mar 23 00:30 flows.20010323_00:30:49-0800
    > 9185 Mar 23 00:45 flows.20010323_00:45:50-0800
    > 25575 Mar 23 01:00 flows.20010323_01:00:52-0800
    > 34320 Mar 23 01:15 flows.20010323_01:15:55-0800
    > 16060 Mar 23 01:29 flows.20010323_01:30:56-0800
    > 25410 Mar 23 01:45 flows.20010323_01:45:57-0800
    > 18700 Mar 23 02:00 flows.20010323_02:00:58-0800
    > 37345 Mar 23 02:15 flows.20010323_02:15:59-0800
    > 36850 Mar 23 02:30 flows.20010323_02:31:00-0800
    > 96360 Mar 23 02:46 flows.20010323_02:46:02-0800
    > 111540 Mar 23 03:01 flows.20010323_03:01:03-0800
    > 121165 Mar 23 03:15 flows.20010323_03:16:05-0800
    > 107195 Mar 23 03:30 flows.20010323_03:31:06-0800
    > 41580 Mar 23 03:45 flows.20010323_03:46:07-0800
    > 14685 Mar 23 04:01 flows.20010323_04:01:09-0800
    > 12815 Mar 23 04:16 flows.20010323_04:16:10-0800
    > 32395 Mar 23 04:31 flows.20010323_04:31:11-0800
    > 37840 Mar 23 04:44 flows.20010323_04:46:13-0800
    > 9020 Mar 23 05:01 flows.20010323_05:01:15-0800
    > 63415 Mar 23 05:16 flows.20010323_05:16:17-0800
    > 60885 Mar 23 05:31 flows.20010323_05:31:18-0800
    > 58630 Mar 23 05:46 flows.20010323_05:46:20-0800
    > 63745 Mar 23 06:01 flows.20010323_06:01:21-0800
    > 94875 Mar 23 06:16 flows.20010323_06:16:22-0800
    > 128315 Mar 23 06:31 flows.20010323_06:31:24-0800
    > 108295 Mar 23 06:46 flows.20010323_06:46:25-0800
    > 162360 Mar 23 07:01 flows.20010323_07:01:26-0800
    > 228855 Mar 23 07:16 flows.20010323_07:16:28-0800
    > 160545 Mar 23 07:31 flows.20010323_07:31:29-0800
    > 692670 Mar 23 07:46 flows.20010323_07:46:32-0800
    > 565950 Mar 23 08:01 flows.20010323_08:01:34-0800
    > 225115 Mar 23 08:16 flows.20010323_08:16:35-0800
    > 113575 Mar 23 08:31 flows.20010323_08:31:37-0800
    > 105105 Mar 23 08:46 flows.20010323_08:46:39-0800
    > 103400 Mar 23 09:01 flows.20010323_09:01:40-0800
    > 57860 Mar 23 09:16 flows.20010323_09:16:42-0800
    > 23760 Mar 23 09:31 flows.20010323_09:31:44-0800
    > 18865 Mar 23 09:46 flows.20010323_09:46:46-0800
    > 31735 Mar 23 10:01 flows.20010323_10:01:47-0800
    > 48565 Mar 23 10:16 flows.20010323_10:16:48-0800
    > 49830 Mar 23 10:31 flows.20010323_10:31:49-0800
    > 74855 Mar 23 10:46 flows.20010323_10:46:52-0800
    > 64680 Mar 23 11:01 flows.20010323_11:01:54-0800
    > 89430 Mar 23 11:16 flows.20010323_11:16:55-0800
    > 97185 Mar 23 11:31 flows.20010323_11:31:56-0800
    > 70070 Mar 23 11:46 flows.20010323_11:46:57-0800
    > 91740 Mar 23 12:01 flows.20010323_12:01:59-0800
    > 89595 Mar 23 12:16 flows.20010323_12:17:01-0800
    > 143440 Mar 23 12:31 flows.20010323_12:32:02-0800
    > 181280 Mar 23 12:47 flows.20010323_12:47:04-0800
    > 146245 Mar 23 13:01 flows.20010323_13:02:07-0800
    > 155320 Mar 23 13:17 flows.20010323_13:17:08-0800
    > 184910 Mar 23 13:32 flows.20010323_13:32:09-0800
    > 78650 Mar 23 13:47 flows.20010323_13:47:10-0800
    > 49665 Mar 23 14:02 flows.20010323_14:02:12-0800
    > 92290 Mar 23 14:17 flows.20010323_14:17:13-0800
    > 85855 Mar 23 14:32 flows.20010323_14:32:14-0800:
    > --
    > cflowd mailing list
    > cflowd@caida.org

    -- 
    ------------------------
    Hendrik Visage
    hvisage@envisage.co.za
    --
    cflowd mailing list
    cflowd@caida.org
    



    This archive was generated by hypermail 2b29 : Sun Mar 25 2001 - 01:43:50 PST