On Wed, Feb 11, 2009 at 4:16 AM, Andrew O'Brien <[email protected]> wrote: > Looking at this further the netflow 5 files are as follows: > > "The file's size must be an integer multiple of 1464, where each 1464 > byte chunk contains a 24 byte NetFlow v5 header and space for thirty 48 > byte NetFlow records. The number of valid records per chunk is specified > in the header." > > I'm assuming this is something for interoperability with a specific > product as it doesn't sound terribly like a simple sequence of V5 PDUs > :)
Actually, it's not too complex - just a fixed size packets, no big deal. What's worse is that importing data into flow-tools and then reexporting it like this will lose exporter IP address information, and flow sequence number. If it doesn't matter, however, the export task is relatively simple. Ah, well the sysUpTime will be meaningless... > So, I'm back to (unreliably) using flow-send to a local collector via > UDP unless someone has another idea for how to do IPFIX conversion. The idea here is to write a converter :) as above... -- This message represents the official view of the voices in my head _______________________________________________ Flow-tools mailing list [email protected] http://mailman.splintered.net/mailman/listinfo/flow-tools
