From netramet-owner  Wed Aug 13 14:26:33 1997
Received: (from majordom@localhost) by mailhost.auckland.ac.nz (8.8.5/8.7.3-ua) id OAA15412 for netramet-outgoing; Wed, 13 Aug 1997 14:19:02 +1200 (NZST)
Received: from spider.uspnet.usp.br (spider.uspnet.usp.br [143.107.253.10]) by mailhost.auckland.ac.nz (8.8.5/8.7.3-ua) with SMTP id OAA15387 for <[email protected]>; Wed, 13 Aug 1997 14:18:55 +1200 (NZST)
Received: from swan.uspnet.usp.br by spider.uspnet.usp.br (AIX 4.1/UCB 5.64/4.03)
         id AA60436; Tue, 12 Aug 1997 23:20:26 -0300
Received: by swan.uspnet.usp.br (AIX 4.1/UCB 5.64/4.03)
         id AA11436; Tue, 12 Aug 1997 23:16:29 -0300
Date: Tue, 12 Aug 1997 23:16:29 -0300 (GRNLNDST)
From: Rosana C de M Grillo Goncalves <[email protected]>
X-Sender: [email protected]
To: [email protected]
Subject: Sampling frequency of the meter
Message-Id: <[email protected]>
Mime-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: [email protected]
Precedence: bulk



Hi,

I've been using Netramet+Nemac for 6 months, and now I'm doing an
application similar to fd_extract, but  I still  have some doubts:

               1) in two  consecutives reports of the same flow, I got:
..... LastTime = 21120  number of packets from = 4 ....
..... LastTime = 21792  number of packets from = 9 ....
What does it mean? there is an interval of 672 hundreds seconds,  with
5 packets from ....    is there a way of decreasing
this interval, and to have an output as:
......LastTime = 21120 number of packets from = 4 ....
......LastTime = 21346 number of packets from = 6 ....
......LastTime = 21792 number of packeta from = 9 .... ??

Thanks in advance,


               Rosana  Grillo Goncalves
       University of Sao Paulo - Brazil


From netramet-owner  Wed Aug 13 19:04:58 1997
Received: (from majordom@localhost) by mailhost.auckland.ac.nz (8.8.5/8.7.3-ua) id TAA12037 for netramet-outgoing; Wed, 13 Aug 1997 19:03:29 +1200 (NZST)
Received: from obelix.hrz.tu-chemnitz.de ([email protected] [134.109.132.55]) by mailhost.auckland.ac.nz (8.8.5/8.7.3-ua) with ESMTP id TAA11969 for <[email protected]>; Wed, 13 Aug 1997 19:02:21 +1200 (NZST)
Received: from tweety.freiepresse.de by obelix.hrz.tu-chemnitz.de
         with SMTP (PP); Wed, 13 Aug 1997 09:01:44 +0200
Date: Wed, 13 Aug 1997 09:01:39 +0200 (MET DST)
From: Torsten Naumann <[email protected]>
X-Sender: [email protected]
To: Rosana C de M Grillo Goncalves <[email protected]>
cc: [email protected]
Subject: Re: Sampling frequency of the meter
In-Reply-To: <[email protected]>
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: [email protected]
Precedence: bulk

On Tue, 12 Aug 1997, Rosana C de M Grillo Goncalves wrote:

Hi,

> I've been using Netramet+Nemac for 6 months, and now I'm doing an
> application similar to fd_extract, but  I still  have some doubts:
>
>               1) in two  consecutives reports of the same flow, I got:
> ...... LastTime = 21120  number of packets from = 4 ....
> ...... LastTime = 21792  number of packets from = 9 ....
> What does it mean? there is an interval of 672 hundreds seconds,  with
> 5 packets from ....    is there a way of decreasing
> this interval, and to have an output as:

This interval means the time left since the last occurance of at least
one packet of this flow. The value is in 1/100 seconds. So the
difference between 21792 and 21120 is 672 1/100 secs --> 6.72 seconds.

ntm34.ps (NeTraMet doc):
------------------------
..
FirstTime
  Time (in 1/100 second ticks from the time the meter started
  executing) at which this flow was first observed by the meter.

LastTime
  Time (units as above) at which a packet was last observed for
  this flow.
..

> .......LastTime = 21120 number of packets from = 4 ....
> .......LastTime = 21346 number of packets from = 6 ....
> .......LastTime = 21792 number of packeta from = 9 .... ??

How you called the NeMaC (I interest in the command line)

The switch -c <secs> can specify the collect interval e.g.

  $ NeMaC -c 120 -f rules.local meter_host write_community

defines the collect interval with 120 seconds

I hope that's what you want to know.

--
bye Torsten

# Torsten Naumann * [email protected] * +49-177-2382319
# Computer Science - TU Chemnitz - FRG * # http://www.tu-chemnitz.de/~tna
# PGP-public-key available via finger on email-address


From netramet-owner  Fri Aug 22 23:19:44 1997
Received: (from majordom@localhost) by mailhost.auckland.ac.nz (8.8.5/8.7.3-ua) id XAA05222 for netramet-outgoing; Fri, 22 Aug 1997 23:14:53 +1200 (NZST)
Received: from dent.axion.bt.co.uk (dent.axion.bt.co.uk [132.146.16.161]) by mailhost.auckland.ac.nz (8.8.5/8.7.3-ua) with SMTP id XAA05213 for <[email protected]>; Fri, 22 Aug 1997 23:14:43 +1200 (NZST)
Received: from ferao.jungle.bt.co.uk by dent.axion.bt.co.uk with SMTP (PP); Fri, 22 Aug 1997 11:47:46 +0100
Received: from sherekhan.jungle.bt.co.uk by ferao.jungle.bt.co.uk (Jungle-SMTP-01) ID AA02212; Fri, 22 Aug 1997 11:38:19 +0100
Received: from ikki (tha) by sherekhan.jungle.bt.co.uk; Fri, 22 Aug 97 11:38:19 BST
Message-Id: <[email protected]>
Date: Fri, 22 Aug 1997 11:39:49 +0100
From: Konstantinos Damianakis <[email protected]>
X-Mailer: Mozilla 4.01b6C [en] (X11; I; IRIX 6.3 IP32)
Mime-Version: 1.0
To: [email protected]
Subject: Question
X-Priority: 3 (Normal)
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: [email protected]
Precedence: bulk

I am trying to set NeTraMet to work on a PC but I cannot find the
WATTCP packet driver or something like that.
Could you help me by either including the binaries for the PC
or by givinbg me an address from where to download it ?
Does it work with all Ethernet cards ?
Please reply to [email protected]

Thanking you in advance,
Konstantinos Damianakis
MSc student in University of Kent at Canterbury


From netramet-owner  Thu Aug 28 03:49:51 1997
Received: (from majordom@localhost) by mailhost.auckland.ac.nz (8.8.5/8.7.3-ua) id DAA02480 for netramet-outgoing; Thu, 28 Aug 1997 03:45:48 +1200 (NZST)
Received: from oscar.broadcom.ie (oscar.broadcom.ie [192.107.110.20]) by mailhost.auckland.ac.nz (8.8.5/8.7.3-ua) with ESMTP id DAA02474; Thu, 28 Aug 1997 03:45:41 +1200 (NZST)
Received: from ccgate.broadcom.ie (ccgate.broadcom.ie [192.107.110.100])
       by oscar.broadcom.ie (8.8.7/8.8.6) with SMTP id QAA04569;
       Wed, 27 Aug 1997 16:43:34 +0100 (BST)
Received: from cc:Mail by ccgate.broadcom.ie
       id AA872725326; Wed, 27 Aug 97 16:39:04 GMT
Date: Wed, 27 Aug 97 16:39:04 GMT
From: "DMiranda" <[email protected]>
Encoding: 50 Text
Message-Id: <[email protected]>
To: Nevil Brownlee <[email protected]>
Cc: [email protected]
Subject: Bus Error when running NeTraMet. (now within gdb)
Sender: [email protected]
Precedence: bulk

    Hi Nevil and you all!


    I just run NeTraMet within gdb (GNU Debbuger) and the results are the
    following:

    Note: As I explained in my first mail the "Segmentation Fault" and "Bus
    Error" appear when I run NeTraMet with no parameters. (i.e.: counting one
    out of one packets). When running it with the command -n100 (count one
    packet out of 100) it works well. (altough sometimes the errors appear!)


    RESULT 1) The program stops in the line 345 of the file "meter_ux.c". It
    seems that the pointers p or h (pointers of the headers of the
    packets...I'm not sure about that!) lost their correct addresses.

    See below the result of gdb:



    (gdb) run
    Starting Program: /ntm41-b13/src/meter/NeTraMet
    NeTraMet: Network Traffic Meter V4.1
    Running on homer, interface le0

    Program received signal SIGBUS, Bus error.
    0x13ca8 in ether_callback (user=0x18010000, h=0x5dae0f,
       p=0xb47f00 <Address 0xb47f00 out of bounds>)
       at ../../src/meter/meter_ux.c:345

    345        if (h->ts.tv_sec != last_t_sec) {




    RESULT 2) The gdb result is the same when a "Bus Error" or  a "
    Segmentation Fault" occur. The only thing that changes is that the
    "received signal" is "SIGSEGV" for a segmentation fault and "SIGBUS"
    for a bus error.


    I will appreciate very much the help you can give me with this
    problem.

    Thanks in advance.

    Regards.

    Denys Miranda.
    Broadcom Eireann Research Ltd.