Thank you, Burton, for clarification. The choice of cat-ing is not an option, though, as the whole problem started the other way around: the initial trace file was too big, and my MacOSX' ntop install won't work with it (file too large, or something like that ...), which forced me to create smaller files, in the hope that I can "feed" ntop one file at a time ...
Stef On Tue, 12 Oct 2004 09:13:33 -0500, Burton M. Strauss III <[EMAIL PROTECTED]> wrote: > Nope - once the file ends, ntop stops reading. You would need to cat them > together first. > > -----Burton > > > > > -----Original Message----- > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of > > Stef > > Sent: Monday, October 11, 2004 7:56 AM > > To: [EMAIL PROTECTED] > > Subject: [Ntop] How to read-in multiple files (ntop -f)? > > > > > > I have a need to analyze a trace file, with ntop, outside the box > > where the capture(s) has been produced (i.e. which is why I cannot run > > ntop, but rather having to create a capture, first). I have initially > > created the capture as one single file, but it ended up around 3GB, > > way beyond what my ntop-on-MacOSX-iBook was willing to "swallow". I > > restarted the capture, by creating numerous 5MB files, instead, as: > > > > # tethereal -i <my_if> -a filesize:5000 -b 0 -w <output_file.cap> > > > > which keeps creating the files I need, with the size I am hoping to be > > able to use with ntop. > > > > Now - my question: how do I "read-in" ntop these files, once I > > transfer them to my ntop machine, so that data is sequentially loaded, > > no data is lost in between the reads, and I get the whole picture of > > the traffic? Would: > > > > # while file in .; do ntop -f $file; done > > > > cut it? > > > > TIA, > > Stef > > _______________________________________________ > > Ntop mailing list > > [EMAIL PROTECTED] > > http://listgateway.unipi.it/mailman/listinfo/ntop > > _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
