Hello, I'm trying to build a wrapper around nfdump and I encountered some strange behaviour.
take a look at these commands: $ nfdump -r nfcapd.200701301627 'port 777' -w nfcapd.filtered $ nfdump -r nfcapd.200701301627 -a -A srcip4/2 -w nfcapd.aggr The first one filters, and writes around 10 flows to the file nfcapd.filtered. This works. The second one aggregates the flows (in a totally useless way, but just for demonstration) to nfcapd.aggr. When I print the aggregation to console it workes, but when I look into the nfcapd.aggr file, it is a copy of the original file. It nfdump designed to have this behaviour, or am I trying to do something strange? thanks, - gijs ------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier. Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 _______________________________________________ Nfdump-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
