thank you.. it helped a lot..
another question.. about the files generated with sflow protocol.. can you give
me a better explanation about how they are?
likewise the netflow files are described in nffile.h
something like:
| file header | > | stat record | > | block header > record header >
record data ... |
I'd already tried to understand what are in sflow.h and sflow_proto.h but It's
been hard
thanks, again
________________________________
De: Peter Haag <[email protected]>
Para: Ricardo Rojo Bonfim <[email protected]>
Enviadas: Sábado, 9 de Julho de 2011 2:05
Assunto: Re: [Nfdump-discuss] knowing the nfcapd files structure
On 7/7/11 2:06 PM, Ricardo Rojo Bonfim wrote:
> hello everybody, I'm with problems to understand the nfcapd file..
> extension maps are always after the block header?
> it's about a configuration or is the standard?
> nfcapd has a limit of extension maps?
The file format is documented in nffile.h. There you will find MAX_EXTENSIONS
There is no fix order required for extension maps beside the fact, that a map
must always come before the first record requiring the extension map.
- Peter
>
> sorry for bad english
>
>
>
>
> ------------------------------------------------------------------------------
> All of the data generated in your IT infrastructure is seriously valuable.
> Why? It contains a definitive record of application performance, security
> threats, fraudulent activity, and more. Splunk takes this data and makes
> sense of it. IT sense. And common sense.
> http://p.sf.net/sfu/splunk-d2d-c2
>
>
>
> _______________________________________________
> Nfdump-discuss mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
--
Be nice to your netflow data. Use NfSen and nfdump :)
------------------------------------------------------------------------------
AppSumo Presents a FREE Video for the SourceForge Community by Eric
Ries, the creator of the Lean Startup Methodology on "Lean Startup
Secrets Revealed." This video shows you how to validate your ideas,
optimize your ideas and identify your business strategy.
http://p.sf.net/sfu/appsumosfdev2dev
_______________________________________________
Nfdump-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
