Yes, but it's not quite that simple. If you read the man page you will see a parameter to read in a file. That's NOT what you want - those are pcap (raw packet) files.
When you fire up ntop in the netFlow mode, it starts listening on the specified port for flow packets. So what you need to do is use one of the other flow tools (and I don't remember which one it is off hand) to SEND the flows to the listening port from the file. That way they will appear to ntop as if they were just sent by the router. IIRC the time stamps will confuse ntop (don't trust things like last seen - but that's true anytime you feed file delayed data in) but the count-type data will be there. -----Burton -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Wojciech Sent: Friday, January 13, 2006 3:37 AM To: [email protected] Subject: [Ntop] fast question Hello, I want to start using ntop, and have small question. Can ntop use ft-files (for example ft-v05.2005...) generated by flow-capture application? I have already some flow-analyze system (based on flow-tools and CUFlow), and want ntop to use already captured files. thanks for answer. regards -- Woj _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
