Bytes in/out not correct

cisco / joy

A package for capturing and analyzing network flow data and intraflow data, for network research, forensics, and security monitoring.

Other

1.3k stars 329 forks source link

Bytes in/out not correct #301

Open zliucd opened 2 years ago

zliucd commented 2 years ago

Hi,

I'm using Joy to analyze flow. The bytes in/out output json file are not correct(orders of magnitude difference), by viewing same statistics in Wireshark. Please let me know if Joy was not properly used.

My usage of Joy: joy bidir=1 tls=1 dist=1 zeros=1 retrans=1 xx.pcap | gunzip >joy_result.json

Thanks.