Greetings! (I posted this on the nfdump list but didn't get any responses.)
I am playing with an idea to gather TopN historical data. This data could be
used to help understand what is normal and what is not normal for a TopN report.
The first step is to decide how to best export this data from our netflow data.
My initial idea was to run a nfdump command with a cronjob every 5 minutes. The
problem is, how do I dynamically generate the proper date-based filename?
"nfdump -M /usr/local/nfsen/profiles-data/live/Core1:Core2:Core3:Core4:Core5 -T
-r 2012/10/11/nfcapd.201210111105 -n 10 -s ip/flows"
I also tried using the "nfcapd.current" file for this purpose, but I get this
error:
"nfdump -M /usr/local/nfsen/profiles-data/live/Core1:Core2 -T -r nfcapd.current
-n 10 -s ip/flows"
Open file /usr/local/nfsen/profiles-data/live/Core1/nfcapd.current: bad
version: 0
Open file /usr/local/nfsen/profiles-data/live/Core2/nfcapd.current: bad
version: 0
Thanks!
Tristan Rhodes
Network Engineer
Weber State University
--
Tristan Rhodes
Network Engineer
Weber State University
(801) 626-8549
------------------------------------------------------------------------------
Everyone hates slow websites. So do we.
Make your web apps faster with AppDynamics
Download AppDynamics Lite for free today:
http://p.sf.net/sfu/appdyn_sfd2d_oct
_______________________________________________
Nfsen-discuss mailing list
Nfsen-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
