On 9/14/12 11:13, Phil Mayers wrote:
> On 09/14/2012 10:09 AM, Peter Haag wrote:
>> in 1.6.6 .you may add %eng which identifies engine type/id. You'll need
>> to enable extension 14 see nfcapd(1). In combination, you may identify
>> what you are looking for?
>
> %ra?
Sure! router IP is also always an (additional) option.
- Peter
>
>>
>> - Peter
>>
>> On 9/13/12 17:04, James A. T. Rice wrote:
>>> Hi Folks,
>>>
>>> When tracing back spoofed traffic on the network, the custom output field
>>> %in is useful to show the input interface index, however if using data
>>> from multiple netflow sources, it doesn't show which netflow source this
>>> index is related to, so a field to show that would be useful.
>>>
>>> Or am I missing something?
>>>
>
> ------------------------------------------------------------------------------
> Got visibility?
> Most devs has no idea what their production app looks like.
> Find out how fast your code is with AppDynamics Lite.
> http://ad.doubleclick.net/clk;262219671;13503038;y?
> http://info.appdynamics.com/FreeJavaPerformanceDownload.html
> _______________________________________________
> Nfdump-discuss mailing list
> Nfdump-discuss@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
>
--
--
Be nice to your netflow data
------------------------------------------------------------------------------
Got visibility?
Most devs has no idea what their production app looks like.
Find out how fast your code is with AppDynamics Lite.
http://ad.doubleclick.net/clk;262219671;13503038;y?
http://info.appdynamics.com/FreeJavaPerformanceDownload.html
_______________________________________________
Nfdump-discuss mailing list
Nfdump-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
