Hello,
I just began to use nfdump and my first question is regarding the ability of
nfcapd to deal with many different routers. In the documentation I have found 2
ways to achieve this:
1. The Fisrt way is to dedicated a nfcapd process per router on a
specific port, like below
nfcapd -p 10001 -l /netflow/spool/router1
nfcapd -p 10002 -l /netflow/spool/router2
...
nfcapd -p 1000N -l /netflow/spool/routerN
2. The second is with only one nfcapd process, with parameter -n for each
router source
nfcapd -p 9999 -n router1,192.168.1.1, /netflow/spool/router1 -n
routeur2,192.168.1.2, /netflow/spool/router2, .... -n routeurN,192.168.1.N,
/netflow/spool/routerN
My question is, is there a way to not filter take care of the source router
during the capture with nfcapd to do it with nfdump ? . I have seen that the
router id is send in the netflow message, is this information stor in the
nfdump data and can be reuse after ?
Thanks in advance.
Monnier Vincent
------------------------------------------------------------------------------
Beautiful is writing same markup. Internet Explorer 9 supports
standards for HTML5, CSS3, SVG 1.1, ECMAScript5, and DOM L2 & L3.
Spend less time writing and rewriting code and more time creating great
experiences on the web. Be a part of the beta today.
http://p.sf.net/sfu/beautyoftheweb
_______________________________________________
Nfdump-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
