On 7/20/13 W29 18:45, Jansen Jos wrote:
> Peter,
> 
> A click on an IPv6 address gives a box stating
> 
> "Use IPv6 long format for IPv6lookup"
> 
> The man page of nfdump is quite clear: 
> 
> 
> "To  make  the output more readable, IPv6 addresses are shrinked down to
>        16 characters. The seven most and seven least digits connected with two
>        dots  '..'  are  displayed in any normal output formats. To display the
>        full IPv6 address, use the appropriate long format, which is the format
>        name followed by a 6.
> 
>        Example:  -o line displays an IPv6 address as 2001:23..80:d01e where as
>        the  format  -o  line6  displays  the  IPv6  address  in  full   length
>        2001:234:aabb::211:24ff:fe80:d01e.   The  combination  of -o line -6 is
>        equivalent to -o line6…."
> 
> Unless I missed something really obvious I cannot see how to make the 
> appropriate edit to nfsen.conf  

Well - actually you are right ... but .. you need to select "IPv6 long" in the 
interface, in order to get the full IPv6
address to click on. Otherwise a IPv6 lookup can not work. The interface option 
"IPv6 long" adds -6 as described in the
man page.

> 
> 
> BTW "shrinked" sounds a bit like "processed by a psychologist"; "shrunk" 
> would probably do. 

ok - thanks!

> 
> Patch level of collector:
> 
> FreeBSD hp.udonix.nl 9.1-RELEASE-p4 FreeBSD 9.1-RELEASE-p4 #0: Mon Jun 17 
> 11:42:37 UTC 2013     
> 
> nfdump-1.6.9        Command-line tools to collect and process NetFlow data
> nfsen-1.3.6p1_2     Web based frontend to nfdump netflow collector
> 
> Patch level of source:
> 
> OpenBSD net6501.udonix.nl 5.3 GENERIC.MP#0 amd64
> 
> 
> softflowd-0.9.8p0   flow-based network traffic analyser
> softflowd -i em1 -v 9 -m 50000 -n 10.1.0.12:9995
> 
> source gets packets from an HP Procurve switch with port mirroring enabled 
> (this is a low-end switch without netflow etc used at home and therefore I 
> use a Soekris to capture all packets).

If you like to experiment and softflowd and nfcapd are on the same server, you 
may want to play with nfpcapd, to combine
the two in a single process.


Best regards

        - Peter

> 
> Best regards,
> 
> 
> Jos Jansen
> deputy director, technology
> 
> --
> 
> Snow B.V.
> Unix Specialists
> http://snow.nl
> tel +31 (0)345 656 666
> fax +31 (0)345 656 665
> 
> 
> ------------------------------------------------------------------------------
> See everything from the browser to the database with AppDynamics
> Get end-to-end visibility with application monitoring from AppDynamics
> Isolate bottlenecks and diagnose root cause in seconds.
> Start your free trial of AppDynamics Pro today!
> http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk
> _______________________________________________
> Nfsen-discuss mailing list
> Nfsen-discuss@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
> 

-- 
--
Be nice to your netflow data

------------------------------------------------------------------------------
Get 100% visibility into Java/.NET code with AppDynamics Lite!
It's a free troubleshooting tool designed for production.
Get down to code-level detail for bottlenecks, with <2% overhead. 
Download for free and get started troubleshooting in minutes. 
http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.clktrk
_______________________________________________
Nfsen-discuss mailing list
Nfsen-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss

Reply via email to