ntop / nProbe

Open source components and extensions for nProbe

Home Page:http://ntop.org

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Missing TCP flag field in dumped flow records

KaraRyougi opened this issue · comments

During processing of some dumped data from nProbe (Cento), I noticed that in one record the TCP Flag field is missing.

167XXXXXXX.585223|167XXXXXXX.585223|200|XX:XX:XX:XX:XX:XX|XX:XX:XX:XX:XX:XX|6|44|2400:8901::XXXX|0|2602::XXXX|0|R2R|1|2|4|3096|0|0||0|0|0|0

It happens 1 among 1 million records, but I wonder why would that be the case...