Because of bug with pointer casting flow-headers have broken output of capture start and end times like this: ----------------------------------------------------------------- hostname data # flow-header < ft-v05.2007-05-10.183242+0400 # # mode: normal # capture hostname: hostname # capture start: (null)# capture end: Sun Aug 30 12:59:48 2415 # capture period: 138 seconds # compress: on # byte order: little # stream version: 3 # export version: 5 # lost flows: 0 # corrupt packets: 0 # sequencer resets: 0 # capture flows: 92640 # ----------------------------------------------------------------- start time is (null) and end time is far in the future.
Created attachment 118777 [details, diff] lib/ftio.c patch This patch should fix this problem. After applying it flow-headers shows correct capture times for me.
Alexander, emerge --info, please. I did not manage to reproduce the bug on x86.
The bug is x86_64-specific. Other such kind of patches for flow-tools are already in portage. But this place seems to be missed by patch-maker.
Created attachment 119346 [details] emerge --info Attached "emerge --info" if it matters.
Thank you for report! This and similar issue in ftstat.c are fixed in flow-tools-0.68-r5.