-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Radek Krejci wrote:
> Hi,
> storing MAC addresses (as well as some other NetFlow v9 fields) are
> newly supported in nfdump development snapshot released in the summer.
> Information how to process these fields can be found in nfcapd(1) man
> page at description of '-T' option.

Yes - this is actually true. However, please note, that this snapshot
is ongoing work. But any feedback is appreciated.

        - Peter

> 
> Best regards,
> Radek Krejci
> 
> Mohacsi Janos napsal(a):
>>
>> On Wed, 26 Nov 2008, Jens Syckor wrote:
>>
>>> Hallo,
>>>
>>> is it possible to use netflow version 9 with nfsen/nfdump?
>> Yes. We are using it.
>>
>>
>>> I have added MAC-addresses for netflow export and want to search this data 
>>> with nfsen.
>> Not posible as far as I know. nfdunp format does not support MAC address.
>>
>> Regards,
>>              Janos
>>
>>
>> -------------------------------------------------------------------------
>> This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
>> Build the coolest Linux based applications with Moblin SDK & win great prizes
>> Grand prize is a trip for two to an Open Source event anywhere in the world
>> http://moblin-contest.org/redirect.php?banner_id=100&url=/
>> _______________________________________________
>> Nfsen-discuss mailing list
>> Nfsen-discuss@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
> 
> -------------------------------------------------------------------------
> This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
> Build the coolest Linux based applications with Moblin SDK & win great prizes
> Grand prize is a trip for two to an Open Source event anywhere in the world
> http://moblin-contest.org/redirect.php?banner_id=100&url=/
> _______________________________________________
> Nfsen-discuss mailing list
> Nfsen-discuss@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss

- --
_______ SWITCH - The Swiss Education and Research Network ______
Peter Haag,  Security Engineer,  Member of SWITCH CERT
PGP fingerprint: D9 31 D5 83 03 95 68 BA  FB 84 CA 94 AB FC 5D D7
SWITCH, Werdstrasse 2, P.O. Box,  CH-8021   Zurich, Switzerland
E-mail: [EMAIL PROTECTED] Web: http://www.switch.ch/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Darwin)

iQCVAwUBSS5Cdv5AbZRALNr/AQK8hAP/fPF/62sKFxStNrkqRxAY3OV4/ZcJ9Ar1
t5+/BD1OhTu0uvDNMSkonWFPXLLQtlYARevv/A6Wrv4J/YdhuLnCTUc3275bV0CO
yJTOpNPXGGYtwg8Hx5qAadBUhVL92+vWiwmKknlvMt3mpXJhXPQdj5xqgyLPZVW0
5uZ7TaUPs74=
=yrs+
-----END PGP SIGNATURE-----

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Nfsen-discuss mailing list
Nfsen-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss

Reply via email to