parse_flowfile2 ------------------------------------ Configfiler: networks Parses Flowfile(s), reports for each IP found in networks 192.158.3.4 TCP 21,22,25,80,110,443, Rest In/Out Bytes UDP 53, Rest In/Out Bytes ICMP All Ib/Out Bytes OTHER All In/Out Bytes IPaddr 4 Bytes 16 Bytes for each TCP/UDP/ICMP/OTHER Port, Entity. e.g: TCP: 7*16=112 UDP: 2*16=32 , ICMP: 16 OTERH: 16 _> 180 Bytes each IP -> 11796480 Bytes each Class B Network ----- 1. Trial flowfiles_scan: find flowfiles in directory, return fh for each flowfile in directory, flowfile_parse: checks header, returns flow Prototypes for FlowPools: ------------------------- FLOWPOOL *flowpool_init(char *location); location could be a single flowfile or directory with flows flow_t *flowpool_getnext(FLOWPOOL *): retruns next flow or NULL int flowpoool_close(FLOWPOOL *); destroys FLOWPOOL struct FLOWPOOL { current_flowfile number_of_flowfiles } struct FLOWFILE { char *filename; LIST_ENTRY(FLOWFILE) entry; }