ntop / nProbe

Open source components and extensions for nProbe
http://ntop.org
GNU General Public License v2.0
1.62k stars 44 forks source link

%FIRST_SWITCHED%LAST_SWITCHED don't have milliseconds information #594

Open majedluay9 opened 4 months ago

majedluay9 commented 4 months ago

I am writing to seek assistance regarding an issue I've encountered with the nProbe Enterprise L [Linux/Win/FreeBSD] software. Recently, I utilized nProbe to convert pcap files into NetFlow records. My feature selection specifically includes time-related attributes such as %FIRST_SWITCHED and %LAST_SWITCHED to accurately determine the start and end of each flow. According to the information on your website, these features should be available in millisecond resolution, 13 digits in UNIX timestamp. However, the data I am obtaining shows these time values in seconds, 10 digits only, which is not aligned with my research requirements.

Could you please provide guidance or a solution to obtain %FIRST_SWITCHED and %LAST_SWITCHED features with millisecond accuracy.

Thanks Majed