I already set up samplicator and it's working great... I just wanted to know
if I was missing an option before installing it...
Thanks for the explanation (didn't know only root processes had the ability
to spoof the source ip...)
Regards,
Adrian
On Tue, Feb 15, 2011 at 4:28 PM, Peter Haag <ph...@users.sourceforge.net>wrote:
> On 15/2/11 10:35 AM, Adrian Popa wrote:
> > Hello everyone,
> >
> > I just wanted to ask a quick question - is it possible to use the
> > daisy-chaining feature (-R host/port) but to preserve the source IP of
> the
> > netflow source? Right now the re-exported packets have the server's
> source
> > IP. I'm hoping there is command switch I missed, but I fear this option
> > doesn't exist. I'm using nfcapd 1.6.1.
>
> Well - there is good news and bad news: nfdump does not preserve the IP
> address as it does not run as root.
> The good new is - use samplicator from my colleague
> http://code.google.com/p/samplicator. It does what you need.
>
> Regards
>
> - Peter
>
> >
> > Regards,
> > Adrian
> >
> >
> >
> >
> >
> ------------------------------------------------------------------------------
> > The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE:
> > Pinpoint memory and threading errors before they happen.
> > Find and fix more than 250 security defects in the development cycle.
> > Locate bottlenecks in serial and parallel code that limit performance.
> > http://p.sf.net/sfu/intel-dev2devfeb
> >
> >
> >
> > _______________________________________________
> > Nfsen-discuss mailing list
> > Nfsen-discuss@lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
>
> --
> Be nice to your netflow data. Use NfSen and nfdump :)
>
------------------------------------------------------------------------------
The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE:
Pinpoint memory and threading errors before they happen.
Find and fix more than 250 security defects in the development cycle.
Locate bottlenecks in serial and parallel code that limit performance.
http://p.sf.net/sfu/intel-dev2devfeb
_______________________________________________
Nfsen-discuss mailing list
Nfsen-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
