Got it, I hadn't realised that: "Sure! router IP is also always an (additional) option." was a hint I needed to change the nfcapd options.
Doing "-T all" now (via "$EXTENSIONS = 'all';" in nfsen.con), and the router IP shows up. Thanks! Next: Any clues as to how to have nfsen show something a bit immediately usuable than just the Router IP and ifindex though? For example the ability to resolve from a static file with Router IP and IfIndex mappings to interface names or descriptions would remove one step from the process of finding ingress interfaces of evil traffic, which can only be a good thing. Cheers James ------------------------------------------------------------------------------ Got visibility? Most devs has no idea what their production app looks like. Find out how fast your code is with AppDynamics Lite. http://ad.doubleclick.net/clk;262219671;13503038;y? http://info.appdynamics.com/FreeJavaPerformanceDownload.html _______________________________________________ Nfdump-discuss mailing list Nfdump-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nfdump-discuss