-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi all,
I just uploaded a next nfdump snapshot. Feedback is appreciated.
Even if the changes list does not look so impressive, is was a
major change for adding more v9 tags and other feature. ( see below )
The next snapshot will include sampling. So stay tuned.
And - no - there is not yet a final date for stable nfdump-1.6 :)
- Peter
Note:
** THIS IS A DEVELOPER SNAPSHOT **
** NOT TO BE USED IN PODUCTION **
Date: Aug, 15th 2008
nfdump-snapshot-1.5.7-20080815 is a development snapshot. It's not
recommended to be used for production environments.
NEW in snapshot:
- ----------------
- - Added option for multiple netflow stream to same port.
~ -n <Ident,IP,base_directory>
~ Example: -n router1,192.168.100.1,/var/nfdump/router1
~ So multiple -n options may be given at the command line
~ Old style syntax still works for compatibility, ( -I .. -l ... )
~ but then only one source is supported.
- - Added more v9 tags for netflow v9.
~ The detailed tags are listed in nfcapd(1)
~ Adding new tags also extended the binary file format with
~ data block format 2, which is extension based. File format
~ for version <= 1.5.* ( Data block format 1 ) is read
~ transparently. Data block 2 are skipped by nfdump 1.5.7.
- - All new tags can be selected in -o fmt:... see nfdump(1)
- - topN stat for all new tags is implemented
- - Add flexible storage option for nfcapd. To save disk space, the
~ data extensions to be stored in the data file are user selectable.
- - Switch scaling factor ( k, M, G ) from 1024 to 1000.
- - Make nfdump fully 64bit compliant. ( 8bit data alignments and access )
- - Fix a few bugs
Notes:
- - The tools ft2nfdump and all sflow tools are not yet updated for the new
tags.
- - The flow record statistics ( -s record ) does not yet show the additional
tags.
** THIS RELEASE IS NOT INTENDED FOR PRODUCTION **
This release works with NfSen 1.3, however, the interface is not yet able to
profit from the new options.
- Peter
- --
_______ SWITCH - The Swiss Education and Research Network ______
Peter Haag, Security Engineer, Member of SWITCH CERT
PGP fingerprint: D9 31 D5 83 03 95 68 BA FB 84 CA 94 AB FC 5D D7
SWITCH, Werdstrasse 2, P.O. Box, CH-8021 Zurich, Switzerland
E-mail: [EMAIL PROTECTED] Web: http://www.switch.ch/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Darwin)
iQCVAwUBSKVx7/5AbZRALNr/AQLqHwQAkZRf7op2GqBVwm640p9hh4/J25wbJdi6
rmN+nN/TsUeQa4Bd7hKwCBzY/MTyirvturjoUbP+i/MgXLk2NAM0KIkfNTIL+DDB
qUfJf2qhvEGnhPta3JywSoOH5RI9LZJeIwKHdzb+aPFPPplbEviFUKZ+B4GykhLe
GFo4vlqP45U=
=6EIU
-----END PGP SIGNATURE-----
-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Nfsen-discuss mailing list
Nfsen-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
