RE: 100% Multicast

Date view Thread view Subject view Author view

Subject: RE: 100% Multicast
From: Robert S. Galloway (securityguy@ikano.com)
Date: Mon Sep 13 2004 - 11:36:11 CDT 

You are using the CUFlow report module. Most likely you are getting a 0 hit
count because you have not specified your local subnets with the "Subnet"
directive in the CUFlow.cf config file.

Thanks,

Robert S. Galloway
Chief Network Security Engineer
IKANO Communications
Network Operations Department
...the team behind the machines


-----Original Message-----
From: majordomo listserver [mailto:majordomo@mil.doit.wisc.edu] On Behalf Of
fatih ayvaz
Sent: Monday, September 13, 2004 9:44 AM
To: flowscan@net.doit.wisc.edu
Subject: Re: 100% Multicast

Also note the following: (it says "0" hit, why?)
2004/09/13 18:20:12 flowscan-1.020 CUFlow: Cflow::find
took  0 wallclock secs ( 0.04 usr +  0.00 sys =  0.04
CPU) for 10967 flow file bytes, flow hit ratio: 0/710

--- fatih ayvaz <fayvaz77@yahoo.com> wrote:

> Hi,
> Flowscan and flow-capture services seem to be
> running
> properly but the graph shows only multicast
> traffifc.
> And the utilization is 110 bits/sec. But, for real
> the
> util is about 200 Kbps.
> There should be something which picks the multicast
> and  ignores the others.
> Where shall I look? Thanks.
> Fatih
> 
> 
> 		
> __________________________________
> Do you Yahoo!?
> Yahoo! Mail is new and improved - Check it out!
> http://promotions.yahoo.com/new_mail
> 
> --
> Help        mailto:majordomo@net.doit.wisc.edu and
> say "help" in message body
> Unsubscribe mailto:majordomo@net.doit.wisc.edu and
> say
> "unsubscribe flowscan" in message body
> Archive    
>
http://net.doit.wisc.edu/~plonka/list/flowscan/archive/
> 



		
_______________________________
Do you Yahoo!?
Shop for Back-to-School deals on Yahoo! Shopping.
http://shopping.yahoo.com/backtoschool

--
Help        mailto:majordomo@net.doit.wisc.edu and say "help" in message
body
Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
"unsubscribe flowscan" in message body
Archive     http://net.doit.wisc.edu/~plonka/list/flowscan/archive/




--
Help        mailto:majordomo@net.doit.wisc.edu and say "help" in message body
Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
"unsubscribe flowscan" in message body
Archive     http://net.doit.wisc.edu/~plonka/list/flowscan/archive/

Date view Thread view Subject view Author view

This archive was generated by hypermail 2b25 : Mon Sep 13 2004 - 11:37:37 CDT