Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

%FIRST_SWITCHED%LAST_SWITCHED don't have milliseconds information #594

Open
majedluay9 opened this issue Mar 3, 2024 · 0 comments
Open

Comments

@majedluay9
Copy link

I am writing to seek assistance regarding an issue I've encountered with the nProbe Enterprise L [Linux/Win/FreeBSD] software.
Recently, I utilized nProbe to convert pcap files into NetFlow records. My feature selection specifically includes time-related attributes such as %FIRST_SWITCHED and %LAST_SWITCHED to accurately determine the start and end of each flow. According to the information on your website, these features should be available in millisecond resolution, 13 digits in UNIX timestamp. However, the data I am obtaining shows these time values in seconds, 10 digits only, which is not aligned with my research requirements.

Could you please provide guidance or a solution to obtain %FIRST_SWITCHED and %LAST_SWITCHED features with millisecond accuracy.

Thanks
Majed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant