[netsa-tools-discuss] Desc conditions in which records / packets column be same (rwtotal)

[asad]

Hi,

For cmd

" rwtotal --proto --skip-zero int2int-S0_20150914.06"

I see following

protocol|        Records|               Bytes|                Packets|
          1|        373755|            28135559|              373755|
          6|        1480123|         79176833964|          1480123|
         17|       329373|          2177196804|           329373|
         47|              6|               12011|                      6|
         89|             22|              359200|                    22|

Usually the records and packets columns are not same (but in my case
I'm getting flows from cisco asa which follows an event-driven model
for flows exporting).

This also begs a question for which I want some help from community,
what is difference between "records" and "packets" and "flows". For me
it works like with following analogy please correct me If I'm wrong

"records" -> big box
"packets" - > mini-boxes
"flows"-> envelopes

Also, between pkts and flows e.g for how many packets are needed to
contain a single flow? Thanks