[Flow-tools] Why the tcp flag is zero?

[Adam Powers]

What are you exporting flow from? Some exporters will not set the TCP flags.
The Cat6k Sup720 is one such example.


On 8/3/07 5:57 PM, "lijian" <lijian at cstnet.cn> wrote:

> Hello, everybody.
>     I am using the netflow data recently.But I have found a question as
> follows:
>     The tcp flag is always zero no matter what the netflow is. I print the
> content of netflow with the program flow-print. For about 200,000 real netflow
> (All of them are tcp flow),there is not one flow with a non-zero tcpflag.
>     What is the matter? I use the flow-print and run it as follows:
>     ./flow-print -f1< netflowdata
>  
>     Does anyone can help me?Thanks very much.
> Best wishes to all
>  
> 
> lijian
> 2007-08-03
> 
> 
> _______________________________________________
> Flow-tools mailing list
> flow-tools at splintered.net
> http://mailman.splintered.net/mailman/listinfo/flow-tools



-- 

Adam  Powers
Chief Technology Officer
Lancope, Inc.
c. 678.725.1028
f. 678.302.8744
e. adam at lancope.com

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.splintered.net/pipermail/flow-tools/attachments/20070803/d2c62047/attachment.htm