Skip to content
This repository was archived by the owner on Oct 7, 2025. It is now read-only.

Use the packet trace timestamps in netflow records - #82

Merged
Mynacol merged 1 commit into
BelWue:masterfrom
Mynacol:pcap-timestamps
Dec 9, 2024
Merged

Mynacol merged 1 commit into
BelWue:masterfrom
Mynacol:pcap-timestamps

Conversation

@Mynacol

@Mynacol Mynacol commented Nov 18, 2024

Copy link
Copy Markdown
Collaborator

Instead of the current time.
Equally, copy the incoming stream (on the in channel) timestamps.

The aggregate segment will take the first timestamp as flow start and the last timestamp as flow end from all the connected sub-flows for the final flow (at least when the packet trace/flow data is sorted by time).

Instead of the current time.
Equally, copy the incoming stream (on the in channel) timestamps.

The aggregate segment will take the first timestamp as flow start and
the last timestamp as flow end from all the connected sub-flows for the
final flow (at least when the packet trace/flow data is sorted by time).
@Mynacol
Mynacol merged commit 278ee12 into BelWue:master Dec 9, 2024
@Mynacol
Mynacol deleted the pcap-timestamps branch December 9, 2024 09:37
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

⌂ 换网址