Got it,

I hadn't realised that: "Sure! router IP is also always an (additional) 
option." was a hint I needed to change the nfcapd options.

Doing "-T all" now (via "$EXTENSIONS = 'all';" in nfsen.con), and the 
router IP shows up. Thanks!

Next: Any clues as to how to have nfsen show something a bit immediately 
usuable than just the Router IP and ifindex though? For example the 
ability to resolve from a static file with Router IP and IfIndex mappings 
to interface names or descriptions would remove one step from the process 
of finding ingress interfaces of evil traffic, which can only be a good 
thing.

Cheers
James

------------------------------------------------------------------------------
Got visibility?
Most devs has no idea what their production app looks like.
Find out how fast your code is with AppDynamics Lite.
http://ad.doubleclick.net/clk;262219671;13503038;y?
http://info.appdynamics.com/FreeJavaPerformanceDownload.html
_______________________________________________
Nfdump-discuss mailing list
Nfdump-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfdump-discuss

Reply via email to