Hi all,
we found a problem when printing netflow data date sorted with nfdump
(option –m). In this case, nfdump(1) is not able to distinguish IP
versions and all addresses are printed in IPv4 format. The bug concerns
both stable version 1.5.7 as well as last snapshot (and just released
version 1.5.8).
I’m enclosing a patch for stable version 1.5.7 (bugfix for the
snapshot/v1.5.8 is the same but on different line).
Next thing I'd like to ask, is nfdump's option -T, which is not
documented (man page or -h option). It prints special binary tag before
IP addresses (visible after redirecting nfdump's output into the file).
Is there any utilization for this tag?
Best regards,
Radek Krejci
*** original/nfstat.c Fri Feb 22 10:33:40 2008
--- patch/nfstat.c Fri May 1 16:59:29 2009
***************
*** 816,821 ****
--- 816,822 ----
FlowTable.NextElem++;
record->next = NULL;
+ record->record_flags = flow_record->flags;
record->ip.v6.srcaddr[0] = flow_record->v6.srcaddr[0];
record->ip.v6.srcaddr[1] = flow_record->v6.srcaddr[1];
record->ip.v6.dstaddr[0] = flow_record->v6.dstaddr[0];
------------------------------------------------------------------------------
The NEW KODAK i700 Series Scanners deliver under ANY circumstances! Your
production scanning environment may not be a perfect world - but thanks to
Kodak, there's a perfect scanner to get the job done! With the NEW KODAK i700
Series Scanner you'll get full speed at 300 dpi even with all image
processing features enabled. http://p.sf.net/sfu/kodak-com
_______________________________________________
Nfdump-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
