-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi gijs
- --On February 1, 2007 12:03:47 +0100 Gijs Molenaar <[EMAIL PROTECTED]> wrote:
|
| Hello,
|
| I'm trying to build a wrapper around nfdump and I encountered some
| strange behaviour.
|
| take a look at these commands:
| $ nfdump -r nfcapd.200701301627 'port 777' -w nfcapd.filtered
| $ nfdump -r nfcapd.200701301627 -a -A srcip4/2 -w nfcapd.aggr
|
|
| The first one filters, and writes around 10 flows to the file
| nfcapd.filtered. This works.
|
| The second one aggregates the flows (in a totally useless way, but just
| for demonstration) to nfcapd.aggr. When I print the aggregation to
| console it workes, but when I look into the nfcapd.aggr file, it is a
| copy of the original file.
|
| It nfdump designed to have this behaviour, or am I trying to do
| something strange?
nfdump allows you you only to write binary files after a filter applied,
as in example 1. Post filter processing flows can not (yet) be saved, as only
the
processing dependant flow information is kept in memory, everything else is
discarded. However, this may change in future.
- Peter
|
|
| thanks,
|
| - gijs
|
| -------------------------------------------------------------------------
| Using Tomcat but need to do more? Need to support web services, security?
| Get stuff done quickly with pre-integrated technology to make your job easier.
| Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
| http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
| _______________________________________________
| Nfdump-discuss mailing list
| [email protected]
| https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
- --
_______ SWITCH - The Swiss Education and Research Network ______
Peter Haag, Security Engineer, Member of SWITCH CERT
PGP fingerprint: D9 31 D5 83 03 95 68 BA FB 84 CA 94 AB FC 5D D7
SWITCH, Limmatquai 138, CH-8001 Zurich, Switzerland
E-mail: [EMAIL PROTECTED] Web: http://www.switch.ch/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (Darwin)
iQCVAwUBRcMliv5AbZRALNr/AQI+YAP+KRgXlaegiwoHM6YnN3u9cQgbvWxqd/C5
lf9LFZHzL/avsYD4Ip7mYJM68tRHV1qM1J9kvpywkFoCy7UIJjoDFOrFqupPxqia
8pA2qCHnkkiWjkBseg6OD0Tb6tV41ZM7KkCtwGmobAydA0wBrIQoxEXabZiiVgim
tSEAl7xFN+8=
=j7Rc
-----END PGP SIGNATURE-----
-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Nfdump-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
