On 01/07/16 17:39, Satish Patel wrote: > On nfdump i am seeing this. > > [root@netflow 30]# nfdump -M /data/nfsen/profiles-data/live/r1 -T -r > nfcapd.201606301715 -a -c 10 > Date first seen Duration Proto Src IP Addr:Port > Dst IP Addr:Port Packets Bytes Flows > 1969-12-31 19:00:00.000 0.000 0 176.61.183.77:0 -> > xx.xx.xx.98:0 56 2688 1
If the time is correct in the exported packets, then it makes me wonder which version of nfdump you're using. IPFIX might as well be 'Netflow v10', so support might be patchy with older variants of nfcapd/nfdump. -- Tom _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
