nProbe icon indicating copy to clipboard operation
nProbe copied to clipboard

%FIRST_SWITCHED%LAST_SWITCHED don't have milliseconds information

Open majedluay9 opened this issue 1 year ago • 0 comments

I am writing to seek assistance regarding an issue I've encountered with the nProbe Enterprise L [Linux/Win/FreeBSD] software. Recently, I utilized nProbe to convert pcap files into NetFlow records. My feature selection specifically includes time-related attributes such as %FIRST_SWITCHED and %LAST_SWITCHED to accurately determine the start and end of each flow. According to the information on your website, these features should be available in millisecond resolution, 13 digits in UNIX timestamp. However, the data I am obtaining shows these time values in seconds, 10 digits only, which is not aligned with my research requirements.

Could you please provide guidance or a solution to obtain %FIRST_SWITCHED and %LAST_SWITCHED features with millisecond accuracy.

Thanks Majed

majedluay9 avatar Mar 03 '24 07:03 majedluay9