On 03.03.15 18:20, Evgeny Vainerman wrote:
> Hello Everyone!
>
> I'm trying to collect and process the IPFIX data with enterprise-specific
> Information Elements.
> Is there a way to configure nfdump to store these elements without source
> code modification?
If you collect all elements ( nfcapd -Tall ) and you don't see them in the full
record ( nfdump -o raw ) then the IPFIX
module needs be be extended. The nfcapd(1) man page basically shows, what
nfcapd/nfdump can process.
- Peter
>
> -
> Thanks,
> evgvain
>
>
>
> ------------------------------------------------------------------------------
> Dive into the World of Parallel Programming The Go Parallel Website, sponsored
> by Intel and developed in partnership with Slashdot Media, is your hub for all
> things parallel software development, from weekly thought leadership blogs to
> news, videos, case studies, tutorials and more. Take a look and join the
> conversation now. http://goparallel.sourceforge.net/
>
>
>
> _______________________________________________
> Nfdump-discuss mailing list
> Nfdump-discuss@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
>
--
Be nice to your netflow data. Use NfSen and nfdump :)
------------------------------------------------------------------------------
Dive into the World of Parallel Programming The Go Parallel Website, sponsored
by Intel and developed in partnership with Slashdot Media, is your hub for all
things parallel software development, from weekly thought leadership blogs to
news, videos, case studies, tutorials and more. Take a look and join the
conversation now. http://goparallel.sourceforge.net/
_______________________________________________
Nfdump-discuss mailing list
Nfdump-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
