On Tue, 04 Mar 2008 13:08:52 +0100 Peter Haag <[EMAIL PROTECTED]> wrote:
> If aggregation is required, a new field in the master record would be required > holding the org label. An appropriate function mapping the IP address to an > org > label, while filling the master record ( ExpandRecord function ) could be a > Berkely > db or similar b-tree lookups with custom lookup function allowing, not only to > lookup a single IP address but a IP range to org mapping. As input for this > b-tree > you may use the file as described above. The filter then can be extended to > this > new org label in the master record. Aggregation is important, yes. > Hope this helps Your input was very helpful, thanks. I will study the nfdump source to see where we need to create hooks for our new filter primitive. - Vegard V - ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ Nfdump-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
