<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7654.12">
<TITLE>RE: flow-export against flow-gen -V 5 files: exaddr missing from wire but present in ascii?</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->
<P><FONT SIZE=2 FACE="Arial"> I am using flow-export version 1.26 against files created w/flow-gen version 5 '-V 5' and outputting wire format via flow-export '-f 4'. </FONT></P>
<P><FONT SIZE=2 FACE="Arial"> $Id: flow-export.c,v 1.26 2004/03/31 03:11:14 maf Exp $</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial"> It seems to be missing the exaddr field 'Exporter IP address' which I do need and which is present in ascii delimited output '-f 2' as the 4th ordinal. Is this by design? Am I missing something? </FONT></P>
<P><FONT SIZE=2 FACE="Arial"> It is in the flow-gen output:</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">struct fts3rec_v5 {</FONT>
<BR><FONT SIZE=2 FACE="Arial"> u_int32 unix_secs; /* Current seconds since 0000 UTC 1970 */</FONT>
<BR><FONT SIZE=2 FACE="Arial"> u_int32 unix_nsecs; /* Residual nanoseconds since 0000 UTC 1970 */</FONT>
<BR><FONT SIZE=2 FACE="Arial"> u_int32 sysUpTime; /* Current time in millisecs since router booted */</FONT>
<BR><FONT SIZE=2 FACE="Arial"> u_int32 exaddr; /* Exporter IP address */</FONT>
<BR><FONT SIZE=2 FACE="Arial"> etc.</FONT>
</P>
<P><FONT COLOR="#0000FF" SIZE=2 FACE="Arial"> </FONT> <FONT COLOR="#000000" SIZE=2 FACE="Arial">I don't see it in struct ftpdu_v5</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial"> Thanks in advance for any guidance!</FONT>
</P>
<BR>
</BODY>
</HTML>