Hi, i am currently using nfdump: Version: 1.6.3p1 which is reporting invalid IPv6 adresses as you can see from the following output.
Is there anything special required besides filtering "inet6" ? /usr/local/bin/nfdump -M /opt/nfsen/profiles-data/live/core2:core1 -r nfcapd.201110050525 -n 10 -s srcip/packets 'inet6' Top 10 Src IP Addr ordered by packets: Date first seen Duration Proto Src IP Addr Flows(%) Packets(%) Bytes(%) pps bps bpp 2011-10-05 05:27:29.425 17.765 any 2001:6b..18::142 421(100.0) 215552(100.0) 220.5 M(100.0) 12133 99.3 M 1022 Kind regards, Philipp ------------------------------------------------------------------------------ All the data continuously generated in your IT infrastructure contains a definitive record of customers, application performance, security threats, fraudulent activity and more. Splunk takes this data and makes sense of it. Business sense. IT sense. Common sense. http://p.sf.net/sfu/splunk-d2dcopy1 _______________________________________________ Nfsen-discuss mailing list Nfsen-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nfsen-discuss