[flow-tools] Re: Question about flow-stat internal/external

[Mark Fullmer]

note the mailing list is at flow-tools@splintered.net.

Version 1,5,6,7 exports all use the source and destination IP as a
subset of the key used to define a flow.  When a flow is terminated
the key fields, counters, and start/end time of the flow are exported.

flow-stat -f9 is a summary of the counters and duration using the source
IP as a key.  -f10 uses the source and destination as a key.

On Thu, Sep 06, 2001 at 03:39:04PM -0400, Dave Hartzell wrote:
> Could someone please explain what reference point is used by flows tat
> when the  terms source and destination are used with the -f9 and -f10
> CLI options?
> 
> Thanks!
> 
> dave
>