Curious how the netflow data got stored in those files originally? I.e., 
what format are they in? ASCII?

Netflow data arrives at a collector as a series of UDP packets with PDUs 
in the v5 format. A typical collector breaks apart the payload and stores 
it in some format. 

If it is ASCII (or cflowd), flow-import will be able to create flow-tools 
data from it.

Joe




Glenn Hochberg <[EMAIL PROTECTED]> 
Sent by: [EMAIL PROTECTED]
04/28/2008 04:10 PM

To
[email protected]
cc

Subject
[Flow-tools] Printing raw netflow v5






Sorry--somehow left off the subject line.  Here it is again.

On Apr 28, 2008, at 3:17 PM, Glenn Hochberg wrote:

> I have some raw netflow v5 data in some files.  These are not flow- 
> tools format files--just raw netflow.  Is it possible to feed these 
> into the flow-tools commands such as flow-print somehow?
>
> Thanks!
>
>   -Glenn Hochberg
>
>

_______________________________________________
Flow-tools mailing list
[EMAIL PROTECTED]
http://mailman.splintered.net/mailman/listinfo/flow-tools

_______________________________________________
Flow-tools mailing list
[EMAIL PROTECTED]
http://mailman.splintered.net/mailman/listinfo/flow-tools

Reply via email to