On 15/2/11 10:35 AM, Adrian Popa wrote: > Hello everyone, > > I just wanted to ask a quick question - is it possible to use the > daisy-chaining feature (-R host/port) but to preserve the source IP of the > netflow source? Right now the re-exported packets have the server's source > IP. I'm hoping there is command switch I missed, but I fear this option > doesn't exist. I'm using nfcapd 1.6.1.
Well - there is good news and bad news: nfdump does not preserve the IP address as it does not run as root. The good new is - use samplicator from my colleague http://code.google.com/p/samplicator. It does what you need. Regards - Peter > > Regards, > Adrian > > > > > ------------------------------------------------------------------------------ > The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE: > Pinpoint memory and threading errors before they happen. > Find and fix more than 250 security defects in the development cycle. > Locate bottlenecks in serial and parallel code that limit performance. > http://p.sf.net/sfu/intel-dev2devfeb > > > > _______________________________________________ > Nfsen-discuss mailing list > Nfsen-discuss@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/nfsen-discuss -- Be nice to your netflow data. Use NfSen and nfdump :) ------------------------------------------------------------------------------ The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE: Pinpoint memory and threading errors before they happen. Find and fix more than 250 security defects in the development cycle. Locate bottlenecks in serial and parallel code that limit performance. http://p.sf.net/sfu/intel-dev2devfeb _______________________________________________ Nfsen-discuss mailing list Nfsen-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
