From: Darren Ward (email@example.com)
Date: Mon Jun 03 2002 - 22:25:16 PDT
I have cflowd and cfdcollect running fine but have decided that I want to
use the raw flow files and do some aggregation on my own.
Problem is I'm not exactly sure how the flow files are used and what rules
to apply to them.
From what I understand each file is overwritten as each one fills up on an
flow.0 file may be the current flow file and when it reaches the limit then
flow.1 is used and so on until the last file flow.x is used and it goes back
and overwrites flow.0
Is this correct or am I way off base?
Cflowd mailing list
This archive was generated by hypermail 2.1.4 : Mon Jun 03 2002 - 22:37:54 PDT