Hi Paul,

On 8/13/13 W33 15:01, Root, Paul T wrote:
> Hi Peter,
>       Thanks for all your work on this project.
> 
>       I sent mail a week ago, I think you were on Holiday at the time. And I 
> never got a definite answer.

Sorry for that!

> 
>       I need to forward incoming netflow data to 3 (maybe more) other 
> machines. Is that possible with nfcapd? It appears the '-R' is a single use 
> option and you can only forward to one other address. 
> 
>       Can you think of a way to send to multiple sources? It needs to be live 
> data.

In that case, you may want to check samplicator from my colleague Simon: 
http://code.google.com/p/samplicator/
It allows you to resend any UDP traffic to multiple IPs, hence netflow data too.

        - Peter
> 
> Thanks,
> Paul.
> 
> -----Original Message-----
> From: Peter Haag [mailto:ph...@users.sourceforge.net] 
> Sent: Tuesday, August 13, 2013 1:10 AM
> To: 'nfdump-disc...@lists.sourceforge.net'; nfsen-discuss ML
> Subject: [Nfdump-discuss] nfdump-1.6.10p1 released.
> 
> Hi lists,
> nfdump-1.6.10p1 is available for downloading. It fixes some nasty bugs:
> 
> - Fix bug in netflow v5 mudule: extension map size wrong.
> The warning "extension map size wrong" is fixed in the v5 module. Because 
> this bug was in the collector, you still see the message, if you process 
> nfcapd 1.6.10 files. As before, this is only a warning and corrected 
> automatically. It has no influence on the processed data or the result.
> 
> - Fix nftrack - could coredump in some cases.
> If you use PortTracker you should upgrade.
> - Fix bug nfexport: In some cases could result in wrong flow counter.
> - Fix bug in nfanon - stat record update.
> - Fix -t +/-n time window option.
> Obviously this option was not used a lot. Originally invented in 1.4, it 
> broke in one of the major release updates. It's reconnected again and lists 
> all flows starting and ending within the given time slot in seconds from the 
> start or end of a file e.g. -t -60 lists all flows starting and ending from 
> (t-60 .. t) with t the last time stamp see in a file.
> 
> There are no new features in this release, so updates for IPFIX, ASA NSEL 9.x 
> and others go into 1.6.11.
> 
>       - Peter
> 
> 
> --
> Be nice to your netflow data
> 
> ------------------------------------------------------------------------------
> Get 100% visibility into Java/.NET code with AppDynamics Lite!
> It's a free troubleshooting tool designed for production.
> Get down to code-level detail for bottlenecks, with <2% overhead. 
> Download for free and get started troubleshooting in minutes. 
> http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.clktrk
> _______________________________________________
> Nfdump-discuss mailing list
> nfdump-disc...@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
> 
> ------------------------------------------------------------------------------
> Get 100% visibility into Java/.NET code with AppDynamics Lite!
> It's a free troubleshooting tool designed for production.
> Get down to code-level detail for bottlenecks, with <2% overhead. 
> Download for free and get started troubleshooting in minutes. 
> http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.clktrk
> _______________________________________________
> Nfdump-discuss mailing list
> nfdump-disc...@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
> 

-- 
--
Be nice to your netflow data

------------------------------------------------------------------------------
Get 100% visibility into Java/.NET code with AppDynamics Lite!
It's a free troubleshooting tool designed for production.
Get down to code-level detail for bottlenecks, with <2% overhead. 
Download for free and get started troubleshooting in minutes. 
http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.clktrk
_______________________________________________
Nfsen-discuss mailing list
Nfsen-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss

Reply via email to