Hi folks,

I have the need, or I'm under the misapprehension that I have the
need, to convert collected v4/v6 flow records into pcap files with
synthetic packets having headers that match the flow records, and
obviously no payload.  The output pcap files would have either the
total packet or byte count matching the flows they represent.

Has anyone patched nfdump or built a tool to do so?

There was a similar option with flow-print (part of flow-tools)
that I once patched to make the byte-count option.

Thanks!
Dave

P.S. Just asking before I write it.

-- 
[email protected]  http://net.doit.wisc.edu/~plonka/  Madison, WI

------------------------------------------------------------------------------
Simplify data backup and recovery for your virtual environment with vRanger. 
Installation's a snap, and flexible recovery options mean your data is safe,
secure and there when you need it. Data protection magic?
Nope - It's vRanger. Get your free trial download today. 
http://p.sf.net/sfu/quest-sfdev2dev
_______________________________________________
Nfdump-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfdump-discuss

Reply via email to